Hallo
i want to see if somebody using port-forwarding from witch IP its coming now I only see the IP of the router
if i click under IP>Firewall>NAT the option In.Interface:Ether1
now I’m able to see the external IP but this blocks al my outgoing traffic (no access to internet)
Hello, post your config it’ll be more easy to help you
If you already have the port forward in place then use torch to see the source IP of that particular port number.
Do you changing the NAT for inside NAT destroying your masquerade? I mean, do you still have masq rule?
It sounds like your nat rule just does masquerade on all traffic regardless of direction.
Your srcnat rule should look like this:
chain=srcnat out-interface={wan-interface-name} action=masquerade
If you’re also using hairpin NAT (i.e. you want to access the pinhole via the public IP of the router, but from inside the network) then you also need a srcnat rule like this:
chain=srcnat out-interface={lan-interface-name} action=masquerade src-address=192.168.0.0/24
(replace 192.168.0.0/24 with the network address in use on your lan)
problem solved
The Masquerade rule was not good. The Out. Interface was on Interface 1 instead of vlan34.