port forwarding and masking WAN ip

RouterOS Forwarding Protocols
1

I have web server on 10.1.1.100/24 and router on 10.1.1.1 forwarding WAN port 80 to server.
Now this works fine, but I want all requests to web server seem like from 10.1.1.1 and not from public network.
How can I do that? tnx

2

Add a masquerade (or src-nat) rule for that traffic on the inside interface in the outbound direction. Something like:

/ip firewall nat
add chain=srcnat dst-address=10.1.1.100 protocol=tcp dst-port=80 out-interface=LAN action=masquerade

I’m curious, why would you want to mask the WAN IPs talking to the server?

3

Thanks, it works great. :slight_smile:

There are actually quite a few private networks, and some of the servers can’t route outside of 10/8, so masquerading is very helpful here.