Routing setup question

I have a RB133 with fairly simple (I think) setup which is not working. Looking for someone to confirm my belief or tell me the problem.

I do not have the config available at the moment so I’ll explain generally.

I have 4 interfaces in the RB133…
eth1 - hooked to internet - 208.10.10.10/24
eth2 - special network access for special server access - 10.10.10.10/24
eth3 - office computers lan switch - 192.168.168.1/24
wlan1 - guest wireless - 192.168.192.1/24

I setup the interfaces as described above, and added default route to 208.10.10.1 which is the internet gateway.

I then added two source nat rules…
source nat - source ip 192.168.168.0/24 - action masquerade
source nat - source ip 192.168.192.0/24 - action masquerade

So here is what I expect to happen…
Computer on eth3 (office computer) tries to go to google it can because its ip range is natted and since the ip is not in the routing table the default route is used. This may work, couldn’t test it.

I also expect a computer on eth3 (office computer) that tries to go to special server 10.10.10.20 that it can because it range is natted and the source /24 network has a route in the routing table because eth2 is local to this special server (on same subnet). This doesn’t work. Seems like its straight forward since the special server is local to the eth2 interface.

I have connection tracking on and I see nothing. running v2.9.50 I can ping the special server from RB tools in winbox but cannot get traffic from eth3 to get to addresses on eth2.

Anyone have any ideas without me posting the exact config?

Thanks for your time…

Scott

paste your routing configuration