Nat rules passing global IP's

RouterOS Beginner Basics
1

Hi

I have a pile of static IPs from my ISp some of them I want to rout to specific addresses on my 10.100.96.0/19 network

So i create a dst rule in the IP Firewall section and all works well. I can remote into the site using the Global IP I assigned in the dst nat rule.

Chain = dstnat
dst address =x.x.x.60
Protocol=6(tcp)

Under the action tag

Action= dstnat
to address= 10.100.121.48
To Ports= 0-65535

Now for the outbound I want it to appear with the glogal IP .60 if i do an IP check from check my ip or whatever.So I create a scr rule.

Chain = scrnat
scr address =10.100.121.48
Protocol=6(tcp)

Under the action tag

Action= scrnat
to address= x.x.x.60
To Ports= 0-65535

But it does not show the .60 as my IP it shows.5 as explained below

Now there is another rule at the top of the list that is

Chain=scrnat

under action
Action=masquerade

I did not put this rule in it seems to have come with the first IP I installed on the WAN Side which is x.x.x.5

So right now everyone checking their IP get the .5 as their IP…if I change it to 20 from 5 then everyone gets 20 as their IP.

If I delete this rule no one gets on line

If I move my scrnat for .60 above that rule then the host with the .60 rule does not get online.


I am soo lost lol
thanks in advance for your time

2

Chain = scrnat
dst address =10.100.121.48
Protocol=6(tcp)

should be

Chain = scrnat
src address =10.100.121.48
Protocol=6(tcp)

You’re interested in translating packets with a source address of 10.100.121.48 outbound to the Internet, after all. That rule will have to be above the action=masquerade rule.

Also, you can leave off the to-ports for both rules.

3

HI

Sorry

Had that as the scr address not the dst address just a typo on my part.

Every Time I put it above tha masquerade rule I lose connectivity

4

Instead of describing the rules like you did, can you click the “New Terminal” button in Winbox and run this command:

/ip firewall nat export

and then post the output here?

5

HI

Now the thing works when I move it up…I did delete it and re put it in so maybe that was it but I had done that before…oh well it is working and thank you for yout response and time