Local Domain resolution

RouterOS Beginner Basics
1

Hello.

I have my Mikrotik setup with dst-nat, so anyone outside my home network can access my webserver from outside the network.

the mikrotik firewall forwards port 80, 53, 443 + others to my lan server ip 192.168.88.20 which works fine.

However when i am at home and logged into home network, I cannot access my websites.

how can i fix this so it works seemlessly either at home or not?

when i have tried forwarding all traffic using dst-nat, the port 53 thing messes with my internet and causes looping.

2

Take a look at HAIRPIN NAT https://wiki.mikrotik.com/wiki/Hairpin_NAT

3

thanks for this.

the problem i have with hpnat is i cannot access mikrotik router interface if i nat port 80, same with ssh, same with port 53 (dns lookup)

So basically if i try and do port based Nat on the router from the lan side, i basically wreck all my outbound internet/dns.


Is there any other ways to do it?

4

There is, you can do it correctly and then it won’t break anything. :wink: Try posting exact rules you tried, ideally together with other NAT rules.

5

Hi Sob,

I see you have replied to my other thread when i tried to pursue this solution:
http://forum.mikrotik.com/t/hairpin-nat-broke-dst-nat-from-outside/134050/1

Basically i think it might be to do with port 53.

but i could be wrong.

I can visit my websites over lan with this setup, but externally, it does not work anymore!!