Hi There,
I need to have port forwading for RDP (3389) and SSL (443) to work from both the MWEB and Afrihost connetion to one internal IP, but the internal connections must be routed out the gateways that was marked for it.
Current Config:
/ip firewall nat
add action=dst-nat chain=dstnat comment=“RDP to Server from MWEB” disabled=no dst-port=3389 in-interface=MWEB-Ether1 protocol=tcp to-addresses=192.168.0.10
to-ports=3389
add action=dst-nat chain=dstnat comment=“HTTP-SSL to Server from MWEB” disabled=no dst-port=443 in-interface=MWEB-Ether1 protocol=tcp to-addresses=192.168.0.10
to-ports=443
add action=masquerade chain=srcnat comment=“Gateway LAN-Ether2” disabled=no dst-address-list=Allowed-Internet out-interface=LAN-Ether2
add action=masquerade chain=srcnat comment=“Gateway MWEB-Ether1” disabled=no out-interface=MWEB-Ether1 src-address-list=Allowed-Internet
add action=masquerade chain=srcnat comment=“Gateway Afrihost-Ether3” disabled=no out-interface=Afrihost-Ether3 src-address-list=Allowed-Internet
/ip firewall mangle
add action=mark-connection chain=input disabled=no in-interface=LAN-Ether2 new-connection-mark=MWEB_conn passthrough=yes
add action=mark-connection chain=input disabled=no in-interface=LAN-Ether2 new-connection-mark=Afrihost_conn passthrough=yes
add action=mark-routing chain=output connection-mark=MWEB_conn disabled=no new-routing-mark=MWEB_Ether3 passthrough=yes
add action=mark-routing chain=output connection-mark=Afrihost_conn disabled=no new-routing-mark=Afrihost-Ether3 passthrough=yes
add action=mark-routing chain=prerouting comment=“Marked Traffic to Afrihost” disabled=no dst-port=21,20 new-routing-mark=Afrihost-Ether3 passthrough=yes
protocol=tcp
add action=mark-routing chain=prerouting disabled=no dst-port=25 new-routing-mark=Afrihost-Ether3 passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting disabled=no dst-port=53 new-routing-mark=Afrihost-Ether3 passthrough=yes protocol=udp
add action=mark-routing chain=prerouting disabled=no dst-port=80 new-routing-mark=Afrihost-Ether3 passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting disabled=no dst-port=110 new-routing-mark=Afrihost-Ether3 passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting disabled=no new-routing-mark=Afrihost-Ether3 p2p=all-p2p passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting comment=“Marked Traffic to MWEB” disabled=yes dst-port=443 new-routing-mark=MWEB-Ether1 passthrough=yes protocol=tcp
add action=mark-routing chain=prerouting disabled=no dst-port=3389 new-routing-mark=MWEB-Ether1 passthrough=yes protocol=tcp
/ip route
add comment=Afrihost disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=Afrihost-Ether3 scope=30 target-scope=10
add comment=MWEB disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=MWEB-Ether1 scope=30 target-scope=10
Any help will be much appreciated