Hello,I need help 
for a problem with a webpage The E-Procurement platform(http://www.app.gov.al)when the internet is routing in mikrotik router i cant view this webpage and i can not upload file in this server,when i asign real ip to the pc work normaly ,and when route real ip not in mikrotik router with a simple router work perfect ??
the routerboard is rb750 i tried and with rb532 and is ugual can you help me is very important?
What kind of firewall filter rules do you have? If you run an export on /ip firewall and post it here, we might be able to take a look.
Do you have any load balancing going on, or policy based routing? What is your rule for NATing out of the MikroTik?
i dont have any filters only nat src nat masquerade,i dont have policy base routing
Please post:
/ip firewall export
/ip route export
This way we can review what rules you do have and move forward from there.
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall nat
add action=masquerade chain=srcnat comment=“” disabled=no
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip route add comment=“” disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
192.168.215.20 scope=30 target-scope=10
You can try specifying an out interface on your masquerade rule, or specifying a the src-address as your LAN subnet so it doesn’t match everything.
What is the subnet you have for your LAN? Are you behind another home router, the 192.168.215.20 is a private IP, does your ISP hand out private IP addresses for its users?
i prov to specifyng out interface ,not work,i tried with real ip in my router not work my private ip in the router is 192.168.1.0/24,when i route the real ip in one simple router work perfektly !
note:the problem is only with this page www.app.gov.al the other page work perfektly
can you help me?
The page you requested (http://www.app.gov.al) is blank on my system. All other pages work fine.
is blank because it work only in internet explorer 6 or 7 is ssl
Try this
https://www.app.gov.al
It is not blank!
i know this,in the page in the server can not upload file when the internet is routing in mikrotik router,in one simple router work perfectly ?!
Yes, but that is a web server challenge, not Mikrotik. You must configure your web server correctly to issue the correct documents according to the request.
is not my webserver is a public server when uploading procurement documents,is not the problem of the page ,i dont know why in one simple router work ,in mikrotik not work the same internet conection ???
It doesn’t matter who is responsible for what. If the website is http (port 80), then it requires no encryption. If https (port 443), then it does. Period.
there is a solution ???
Yes. Contact the company that provides your web service, and request that the same directory be displayed for your http (port 80) as for https (port 443). Don’t be discouraged. I had to threaten my flight engineer with sweeping the ramp with his toothbrush to get what I wanted (fuel my aircraft before leaving for the day). I almost always get what I want, or somebody pays heavily.
in albania is different,thing are not so,all work like this the problem is that even me work with this system ,there is a solution for my problem???
No it isn’t. Albania is just like everywhere else. Contact your ISP. They will be able to help you. If it works with https (SSL), then it will work with http, unless you are violating some local law.
When some websites work and others do not, i tend to suspect the MTU.
Try lowering the MTU on the interface that goes to the internet to 1450.
You may have to Play with the 1450 and adjust it up/down.