Thanks galaxynet for your reply!
Those rules (#3 and 4) came from this thread: http://forum.mikrotik.com/t/how-to-nat-from-a-hostname/15922/1
I tried removing the in-interface in #2 but didn’t work. I am not sure I explained this clear enough since I’m not english-speaker:
I need rule #2 to access this server from outside. And based on suggestions given in forementioned thread, I set up rules #3-4, to write “xxx.domain:9000” inside my network (as opposed to “10.0.2.2:9000” as I should do w/o those rules) as I do from outside it.
Now, the authentication is not supposed to be enforced by the ROS box, but by the 10.0.2.202 server’s Apache. When a petition comes from outside network, it asks for user/pass. when it comes from inside, no pass is required.
But with rules #3-4 enabled, this does not happens and no one is required authentication (neither from Inside or Outside)
I dont have a static IP, b/c this is only an internal tool, not a service we provide for customers or anything. We just need to check this pages from inside or outside, and we used to do it by using this URL “xxx.domain.com:9000” when Iptables was set up before Mikrotik. Once we switched to ROS, this setup stopped working.
Thanks a lot for reading this and replying in the first place!!