NAT firewall Chain Input or Forward?

RouterOS General
1

I have a dumb question. If you have traffic that is being NAT’ed or masqueraded, does the incoming traffic classify under forward or input in the firewall.

I assume since its dst. address is an address on the router that it would be input but then it is actually being forwarded to another packet. So I’m confused.

Just looking for clarity. Thanks.

2

It’s classified as Input, unless there is already an associated entry in ip tracking or NAT; Then it’s forwarding.

3

If the destination address after NAT is not the router address it is processed in the FORWARD chain.

Otherwise it would be processed in the INPUT chain.

Sent from my LG-D800 using Tapatalk