Hi!
I have to log all NAT activities (ip to ip, ports, etc.). How should i set it, because i already have tried all log settings, but i didnt find the good one.
Thanx
to log all traffic that applyied to NAT rules, you have to place the following rule at the top of NAT rules list:
/ ip firewall nat
add chain=srcnat action=log log-prefix=“SRC-NAT” disabled=no
add chain=dstnat action=log log-prefix=“DST-NAT” disabled=no
But you should be prepared to get a lot of data that way - do you really want/need to log all that stuff?
Best regards,
Christian Meis
thank you very much.
i have to log it because of laws! 
Where are you located (just out of curiosity)?
Best regards,
Christian Meis
Hello,permit my english
Please i need some help on NAT i have a server with the 10.0.0.2/24 and i need to access it from outside with this IP address 63.109.247.27 i use this rule below but i was not able to use it to evrn browse the net and not able to access it from the internet there is no firewall on the Mikrotik if i use src-nat ip firewall nat add chain=srcnat out-interface=Cyber_Net action=masquerade it will browse but when i remove it and use this /ip firewall nat add chain=dstnat dst-address=63.109.247.27 action=dst-nat to-addresses=10.0.0.2
/ip firewall nat add chain=srcnat src-address=10.0.0.2 action=src-nat to-addresses=63.109.247.27 it will not work can any one please help me
Hello Sir,
Please i need some help on NAT i have a server with the 10.0.0.2/24 and i need to access it from outside with this IP address 63.109.247.27 i use this rule below but i was not able to use it to evrn browse the net and not able to access it from the internet there is no firewall on the Mikrotik if i use src-nat ip firewall nat add chain=srcnat out-interface=Cyber_Net action=masquerade it will browse but when i remove it and use this /ip firewall nat add chain=dstnat dst-address=63.109.247.27 action=dst-nat to-addresses=10.0.0.2
/ip firewall nat add chain=srcnat src-address=10.0.0.2 action=src-nat to-addresses=63.109.247.27 it will not work can any one please help me
HU. we’re ISP.