Dear
good afternoon, I have a problem with my RB750, when I create a nat rule to allow it to pass port 80, when externally I resolve my ip, it returns me the ip private of my segment.
This is the rule I have NAT
\ ip firewall nat add chain=dstnat dst-port=80 action=dst-nat protocol=tcp to-addresses=192.168.8.241 to-ports=80
have to create something more? the firewall rules are directly which creates the rb750, likewise the mangle
Thanks a lot
When you say you “resolve” the IP of your Apache server are you talking about a tool like “nslookup” or “dig?”
That said, your rule is a little open-ended.
It will look at all traffic destined to port 80 and translate the destination IP to your web-server. I’d narrow it more to look at a particular destination IP and interface if possible.
That is, ip access from a browser, and it never solves, and in the counters of the rule I do not see a package or a byte entering the rule.
It’s like there’s something leaking ahead so nothing comes
You mean if I knew your hostname and I’d resolve it on my computer, I’d get 192.168.8.241? If so, you configured it wrong. It needs to point to your public adddress.
No, on the contrary, I use the ip public to enter externally, obviously the private ip is not going to have resolution.
If your local DNS server resolves the name to the local RFC1918 IP then it wouldn’t be NAT’d it would be routed instead.
Then I’m not sure if I understand the description:
Could you try to describe it in other words, with some more details?