I have been attempting to setup port forwarding for 443 to a local sbs 2008 server, I have the following setup.
RouterOS v6.40.4 - Public IP connected to Ethernet 1
Router IP 192.168.130.50
Lan Subnet 192.168.130.0
SBS Server 192.168.130.250
I have setup the dstnat rule dst address 81.145.197.66 - protocol tcp - port 443 - dstnat - to address 192.168.130.250 this seems to work fine
I have also setup
srcnat rule - source address 192.168.130.0/24 and destination address 192.168.130.0/24 out interface bridge1 action masquerade
srcnat - out interface ether1 action masquerade
The issue I seem to have is accessing the Outlook webaccess internally, it work when I have the setup above from both externally and internally on the Lan but I suspect it is casuing issues with out devices on the internal network and forwarding 443 traffic to the internal sbs machine??
Here is the config…
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=25 protocol=tcp src-address=
ExternalSmtp_IP to-addresses=192.168.130.250 to-ports=25
add action=dst-nat chain=dstnat dst-port=1723 protocol=tcp to-addresses=
192.168.130.250 to-ports=1723
add action=dst-nat chain=dstnat dst-port=5090 protocol=tcp src-address=
SIPProviderIP to-addresses=192.168.130.220 to-ports=5090
add action=dst-nat chain=dstnat dst-port=5060 in-interface=ether1 protocol=
udp src-address-list=Gamma to-addresses=192.168.130.220 to-ports=5060
add action=dst-nat chain=dstnat dst-port=6000 protocol=udp to-addresses=
192.168.130.220 to-ports=6000
add action=dst-nat chain=dstnat dst-port=40000-40127 protocol=udp
to-addresses=192.168.130.221 to-ports=40000-40127
add action=dst-nat chain=dstnat dst-port=30000-31000 protocol=udp
to-addresses=192.168.130.221 to-ports=30000-31000
add action=dst-nat chain=dstnat dst-port=45000-45127 protocol=udp
to-addresses=192.168.130.221 to-ports=45000-45127
add action=dst-nat chain=dstnat dst-port=30032-30064 protocol=udp
to-addresses=192.168.130.222 to-ports=30032-30064
add action=dst-nat chain=dstnat dst-port=40128-40256 protocol=udp
to-addresses=192.168.130.222 to-ports=40128-40256
add action=dst-nat chain=dstnat dst-port=45128-45256 protocol=udp
to-addresses=192.168.130.222 to-ports=45128-45256
add action=dst-nat chain=dstnat dst-port=6001 protocol=udp to-addresses=
192.168.130.223 to-ports=6001
add action=dst-nat chain=dstnat dst-port=6002 protocol=udp to-addresses=
192.168.130.223 to-ports=6002
add action=src-nat chain=srcnat src-address=192.168.130.0/24
src-address-type=local to-addresses=PUBLIC_IP
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-address=PUBLIC_IP dst-port=443
protocol=tcp to-addresses=192.168.130.250
add action=masquerade chain=srcnat dst-address=192.168.130.0/24
out-interface=bridge1 src-address=192.168.130.0/24
add action=masquerade chain=srcnat comment=“defconf: masquerade” dst-address=
0.0.0.0/0 out-interface=ether1 src-address=192.168.130.0/24
add action=masquerade chain=srcnat out-interface=ether1 src-address=
192.168.0.0/22
Is this possible, am I missing something here, any suggestions would be gratefuly recieved! I have read lots of articles but I feel I am going round in circles here…
Many Thanks,