port forwarding

RouterOS General
1

I want to forward http requests comming from the public ( internet ) to a public webserver ( internet ).

Internet User ---(tcp 80)----> Router's Public IP ---(tcp 80)----> Internet Webserver

[admin@MikroTik] /ip address> pr
Flags: X - disabled, I - invalid, D - dynamic

ADDRESS NETWORK BROADCAST INTERFACE

0 88.1.188.238/26 88.1.188.193 88.1.188.255 ether2
1 192.168.0.1/24 192.168.0.0 192.168.0.255 LAN

[admin@MikroTik] /ip firewall nat> pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=ether2

1 chain=dstnat action=dst-nat to-addresses=192.168.0.51 to-ports=3389 protocol=tcp
dst-port=3389

[admin@MikroTik] /ip firewall filter> pr
Flags: X - disabled, I - invalid, D - dynamic
[admin@MikroTik] /ip firewall filter>

To explain, I want when someone from the internet open http://88.1.188.238 to view my internet website. ( outside the network ex ip: 89.1.51.34 )

Currently, Users from the internet view Webbox when trying http://88.1.188.238.

After adding

ip firewall nat add chain=dstnat in-interface=ether2 protocol=tcp dst-port=80 action=dst-nat to-addresses=89.1.51.34 to-ports=80

Connection times out.

Any help is appreciated, thanks in advance.

2

so, your src-nat is still here? is 89.1.51.34 available via ether2?

3

No, the webserver is hosted on a different ISP on the internet.

4

Your dstnat rule redirects the traffic, but the source (client’s) address remains unchanged. So the packet looks as spoofed and gets filtered somewhere on the way to target server.
Following rule will change the packet’s source to your address. The reply will be sent to you and your router will forward it back to client.

/ip firewall nat add chain=srcnat protocol=tcp dst-port=80 dst-address=89.1.51.34 action=src-nat to-addresses=88.1.188.238