Routing External ip

RouterOS Beginner Basics
1

I host some stuff here at my house. Including a webserver. On my old router if i were to try to connect to my external ip it would work and i could view my website. Using Router OS 3.2 I can only hit the internal IP and get the site to come up. How can I make it so when i hit my external ip from the inside it brings up my website. This is very useful in situations, like on my laptop with email. i can set the email hostname as example.com and still be able to check my mail inside and outside of my network.

2

You mean to say
INTERNET->ROUTER->SERVERS.

Router IP
Ether1-Public IP
Ether2-Private IP

and you want that some one try to open the servers from public network , it should open.

If so,
you need to do src-nat & dst-nat.

Please refer
http://wiki.mikrotik.com/wiki/How_to_link_Public_addresses_to_Local_ones

3

Dear ashish ;
As i see that he had simple router before using MikroTik server ,the server on the public side with a public ip .
and as he say he was connecting to the external ip and it work , and when he start using MT he couldn’t make it any more so he put the server behind the MikroTik and he is connecting now to it by internal ip .
he need to login the server from the lan as well when he went to another internet he could enter this server while the server is outside the MikroTik server as before .
with best regards .

4

Dear Ashish ;
glad to write again .
i read the file from the like above and it bring two important questions :

  1. is it possible to assing more than one ip to an interface ? , and can i assing ip’s from different ranges ? like
    10.0.0.x / 255.255.255.0
    192.168.0.x / 255.255.255.252

  2. in the file i found the following :

  3. To add SRC-NAT rules allowing the internal server to talk to the outer networks having its source address translated to 10.0.0.216, while translating other internal hosts’ source addresses to 10.0.0.217:

[admin@MikroTik] ip firewall nat> add action=src-nat chain=srcnat
src-address=192.168.0.4/32 to-addresses=10.0.0.216
[admin@MikroTik] ip firewall nat> add action=src-nat chain=srcnat
src-address=192.168.0.0/24 to-addresses=10.0.0.217
could we change the second rule to :
[admin@MikroTik] ip firewall nat> add chain=srcnat out-interface=!lan src-address=!192.168.0.254 action=masquerade
comment=“” disabled=no
which one is better and why ?
waiting your reply .
with best regards .
:open_mouth: