It’s works but I need some explantion why works ?
Mikrotik 2.9.26, 5 interface, four in bridge.
One interface I call Internet.
Internet inteface have IP:
10.10.199.9
10.10.100.140
and public IP:2xx.xxx.xxx.10 and use masquerade.
Bridge interface have local IP 192.168.0.x.
0 chain=srcnat out-interface=Internet action=masquerade
I have two group of computer default route is 10.10.100.1 for frist group, second group of computers use mangle and policy routing.
4 chain=prerouting in-interface=Lokal src-mac-address=00:14:xx:xx:xx:02
action=mark-routing new-routing-mark=testIP passthrough=no
everithing is work frist group use default getway 10.10.100.1 and second group use routing mark and getway 2xx.xxx.xxx.1.
And use destination nat
chain=dstnat in-interface=Internet dst-address=2xx.xxx.xxx.10
protocol=tcp dst-port=443 action=dst-nat to-addresses=192.168.0.5
to-ports=443
Now question computer 192.168.0.5 is in the frist group they use getway 10.10.100.1 but this destination NAT work I tested, I don’t know how work?
I don’t routnig mark trafic from 192.168.0.5 they packets go to getway 10.10.100.1 but destination nat work.
I am not expert for networks
.
Thanks..