hi, is there possibility to log NAT mapping?
i use 1:1 mapping.
i am able to get log only on source (internal) and destination address, but i need to track which local addresses were mapped to which public ip addresses.
mkt is used only for nat mapping, but by our lows i need to track which public ip was givent to which local.
i tryed:
ip firewall nat-> chain=dstnat action=log
and
bridge nat-> chain=scrnat action=log
the problem is that in log file i get only which local address got to destination address, but i need to get info of local address, what public address it was mappded and ofcourse destination address
Hi Vilius
I had the same requirement as you . On this link http://forum.mikrotik.com/t/is-there-any-way-to-log-nat/37289/1 I posted my experience. It seems that law requirremtnes are missing around several countries in Europe.
Have a nice day and let me know whenever you will have any news on this!!!
@vilius1
Maybe I’m wrong or I misunderstood something, but with 1:1 mapping you should exactly know how public IPs are mapped to local IPs.
This is how 1:1 mapping works, public subnet mapped to local subnet:
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#1:1_mapping
Regards,
Hi there
yes in case of 1:1 mapping there are no problems, but in case of masquerade for example or in case of a public address pool shared among K times greater private addresses using for example PCC and mangling to assign public ips, the problem could occur.