NAT help

[amangini]

Hi guys, i new in this forum and i new in Mikrotik World
I have a problem, if someone can help me I appreciate…

See the following situation…
Mikrotik is the gateway: 192.168.1.1
ADSL PPPOE Connection: xxx.xxx.xxx.xxx or xxx.no-ip.org
Specific Server Service in my LAN: 192.168.1.4
192.168.1.x (ALL PCs in LAN) access → 192.168.1.4 OK!
Any External Address (Internet) → 192.168.1.4 OK!
192.168.1.x → xxx.xxx.xxx.xxx (xxx.no-ip.org) NOT WORKS
I want access my service for both destinations, 192.168.1.4 or to xxx.xxx.xxx.xxx or xxx.no-ip.org

Exemple…
192.168.1.4:3389 (RDP)
if one LAN PC (192.168.1.10) try access the 192.168.1.4:3389 internally OK, this works!
if one WAN PC (Internet) try access the xxx.xxx.xxx.xxx:3389 or xxx.no-ip.org:3389 OK, this works!
if one LAN PC (192.168.1.10) try access the xxx.xxx.xxx.xxx:3389 (xxx.no-ip.org:3389) NOT WORKS!
if i ping xxx.xxx.xxx.xxx or xxx.no-ip.org from any LAN PC, Works but i not connect
I use a specific service and I need to connect the two forms locally.

NOTE: If i use a common Router like TP-Link, Works OK!

Someone can help me??
Thanks!

[j7n]

I think hairpin NAT in combination with dst-address-type=local instead of one specific dst-address or in-interface will solve this problem. This will make port forwarding work on any of the router’s interfaces.

/ip firewall nat
add action=src-nat chain=srcnat dst-address=192.168.1.0/24 src-address=\
    192.168.1.0/24 to-addresses=192.168.1.1 comment="Hairpin for LAN"
add action=dst-nat chain=dstnat comment="RDP" dst-address-type=local \
    dst-port=3389 protocol=tcp to-addresses=192.168.1.4 to-ports=3389
add action=dst-nat chain=dstnat comment="RDP" dst-address-type=local \
    dst-port=3389 protocol=udp to-addresses=192.168.1.4 to-ports=3389

Alternatively, if you want to access your service by name, example.no-ip.org, consider using the Mikrotik DNS cache resolver on your computers, and create a static entry which is pointing to a local IP.

Port forwarding from inner network to inner network - Superuser

[amangini]

Works Perfect!!! Thank you!!
I didn’t need to configure DNS, its OKOK!
Also didnt need to create an entry, works direct!

Thnaks man!!