Problem with access to server via domain name

RouterOS Forwarding Protocols
1

Hi guys
I wondering what could be the reason that the server in my local network is unreachable via domain name.
I have a domain name like

server.example.com

When I try to connect from the Internet (LTE on the cell phone) then everything is working fine, but I have no access to this server from my local network
In

/ip firewall nat

I can observe that packets are coming, but in Web Browser, I have “time out”

chain=dstnat action=dst-nat to-addresses=LOCAL_SUBNET_IP to-ports=8443 protocol=tcp dst-address=PUBLIC_IP dst-port=443 log=no log-prefix=""

One more thing, I have the default router configuration.

Thanks in advance for your help!

2

The thing you’re looking for is called hairpin NAT and simplest fix is:

/ip firewall nat
add chain=srcnat src-address=LOCAL_SUBNET/MASK dst-address=LOCAL_SUBNET/MASK action=masquerade

Bit more about it: https://forum.mikrotik.com/viewtopic.php?p=892135#p892135

3

At least link to the beginning of the thread LOL.
https://forum.mikrotik.com/viewtopic.php?p=892135#p885249

But correct does sound more hairpin than ISP connectivity.

4

@anav: Your post is mostly about dstnat (which is ok), but since OP already has the best dstnat rule, I just wanted to add a bit more specifically about the srcnat part.

5

Sounds good just let me know if I should beef up any part of the first post…