Hello For all Mikrotik People there…!
so my question like this :
if i want to create a port forwarding rule in my router i have to use the dstnat rule, ok that’s work for me. But why i can’t use the input chain rule instead of dstnat..?
so what is the different between dstnat and between input chain rule..?
anyone have a deep understanding of that.?
The Input chain is for traffic destined for the router itself. A portforward isn’t destined for the router itself (although the ‘destination address’ is the router), but for an internal system beyond it, and because the internal address of that system isn’t known to the other end, the router needs to translate it. Hence the dst-nat rule.
as stated input chain TO the router or router services ( think VPN or config or NTP or DNS )
forward chain through the router (wan to lan, lan to lan, lan to wan)
thanks for both of you..!