port forwading

RouterOS Forwarding Protocols
1

Hi, guys
I am trying to content MikroTik router to a Web server which is installed on Windows using XAMPP. I tried port forwarding but i still can't access my webserver.
IP address of the bridge interface is 192.168.10.1
IP address of the Windows is 192.168.10.8
IP address of the XAMPP web server is 127.0.0.1
This is the port forwarding rule I have configured :
General-------------------------------------------
Chanin: dstnat
protocol: tcp
dst port: 80
in. interface: bridge-hotspot

Action
Action: dst-nat
to addresses: 192.168.10.8
to ports: 80

2

Hi Rob, one cannot tell much from a few snippets of the config.
Please
/export hide-sensitive file=anynameyouwish
(and just hide any ISP IP or gateway information).

I am sure with a full look at your config will have you up and running soonest!

3

hi anav thanks for the relpy
I have attached the confile
confile.rsc (2.51 KB)

4

Hi Rob,
Just to be clear this unit is marketed as an access point but you are using it as a router and access point?

If so, what happed to all the default firewall rules or were there any to begin with?
I would not connect this unit to the internet until you have a more secure configuration.

5

Hi anav
I’m not connecting this to internet. I am just trying to send my hotspot users to a local web server 127.0.0.1 so the user can access my web page.

6

Can you include a network diagrams so its less confusing what is going on.

7

network.PNG

8

Stupid question, you are sure your Xammp services are not bound to 127.0.0.1 (=localhost) only on the PC ?
That might explain a lot. You are running this on Windows OS I read ? Are you sure no host-side firewall is active ?
On that local machine, when opening a webbrowser to test it, do you issue something like http(s)://192.168.10.8 and this works ?

And can you set the “logging” flag on your NAT-rules so at least you can see in the Mikrotik logs something?

9

(http(s)://192.168.10.8 ) When I enter this on local machine web-browser it doesn’t work but if I enter this (http://192.168.10.8) it works.

10

And another very stupid but essential question : your Windows machine does have a default-gateway set back to the AP/router right ?
As you are doing DNAT, the originating source-IP is not translated so your Xammp machine must be able to reply to 192.168.6.x IP’s which are outside of its own network.

11

I can ping from 192.168.10.8(pc/Xammp) to 192.168.10.1(router) and it works fine.
I can’t ping from 192.168.10.8(pc/Xammp) to 192.168.6.1(hotspot)

12

I can ping from 192.168.10.8(pc/Xammp) to 192.168.10.1(router) and it works fine.

You don’t need any routes/gateway for that. Its considered “Direct Connected”

I can’t ping from 192.168.10.8(pc/Xammp) to 192.168.6.1(hotspot)

Unless this is because of some filtering (I don’t use Mikrotik products for Wireless) that does not seem good.
Can you ping from the Xammp server the actual Wireless client connected to the hotspot ? Again, perhaps there is some filtering by default, don’t know the product…
I’ve seen some DHCP config so normally your wireless clients get an IP out of the 192.168.6.x range and have their gateway set to 192.168.6.1

13

For the Hotspot to work correctly, it requires internet access so that any html queries can be redirected to the Hotspot login.html landing page. Instead of trying to redirect with firewall, it would be easier to edit the login.html to:

<head>
  <meta http-equiv="refresh" content="5; URL=https://192.168.10.8/" />
</head>
<body>
  <p>If you are not redirected in five seconds, <a href="192.168.10.8/">click here</a>.</p>
</body>

And this will redirect users to your Xammap Server. Before changing the html file, I would first test to see if you are getting the default page when connecting to the Hotspot first!

14

I tried this. But still, it doesn’t work when the user connects to the hotspot(192.168.6.0). They get login page but after 5 seconds it refresh and the URL changes to 192.168.10.8 on the page it says “This site can’t be reached”