Nat Rule applied to Ipsec tunnel

RouterOS General
1

I have a simple NAT rule to redirect port 80 to my DVR (see below) ether 1 is my WAN interface
;;; DVR
chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=8866
protocol=tcp in-interface=ether1 dst-port=8866

Today I established a IPsec tunnel however ALL port 80 requests (no matter the IP) from the remote locations are getting re-directed to to my DVR using the NAT rule, How can I prevent the NAT rule from applying to tunneled traffic?


Thank you

2

There is nothing about port 80 in your rule. There is probably other rule that makes it…

3

here is the rule
chain=dstnat action=dst-nat to-addresses=192.168.2.60 to-ports=80-81
protocol=tcp in-interface=ether1 dst-port=80-81

4

What about using exclusion on src address?

5

That is a good Idea, Ill give it a try





Thank you