Hi guys,
is it possible to see the Port Address Translation Table in MikroTik?
If my device is natted, how can i see the src port of the connection from my router/firewall/nat to the destination?
In the ip/firewall/connection i can see only the connection between my local ip address and his src port, to the destination. Right?
But i’m looking how can I check the source port used by router to connect with the other side.
You know if we check the destination device we find the same connection with e different suorce port (and source address).
Thanks a lot.
Not sure, but, It must be there - in connections - scroll down ?
And I bet you can solve your problem with some NAT rule.
Give more info.
I don’t find it.
Do you think is in another place? Do you think PAT is a useful thing? I think yes.
I worked with scr-nat rule, but I was surprised for the behavior.
I need to ensure the src-port of a specific connection is the same after the nat o the same that I want.
Example:
chain=srcnat action=src-nat to-ports=20000 protocol=tcp
dst-address=X.X.X.X out-interface=ether1 dst-port=80
It means that all the TCP connections, to the port 80 of X.X.X.X IP address form the ether1 interface, are source natted in port 20000. Right?
First of all I suggest to natted the port 80 (this port is an example) in a range of ports, because multiple connections can start..but this is another thing, not important for me.
Making test I found that with this configuration the src-nat working well about the port (or ports): the src-port is the same that I want.
But the src-address don’t change, despite the field “to-address” is not active. And for “don’t change” I mean that the src-address is the private ip address: 192.168.1.1… Obviously in this situation I can send only syn-sent packets.
If I put in the field “to-address” the public ip address, all works well. But I must write a specific and static IP, is it possible to put a dinamic IP address?
I think there is another way to do this work. Can someone help me please? I am a newbie. 