Src-Natting Router's SNMP Traps

RouterOS General
1

I’d like the SNMP traps from my mikrotik router to be natted to its lookback address. I added the following nat rule.

/ip firewall nat
add action=src-nat chain=srcnat dst-address=10.24.0.8 dst-port=162 protocol=udp to-addresses=10.0.0.10

This unfortunately also seems to also catch any SNMP traps that are forwarded through the router. How can I match only locally originated traffic?

2

Got it.

/ip firewall mangle
add action=mark-packet chain=output dst-port=162 new-packet-mark=local-snmp-trap protocol=udp
/ip firewall nat
add action=src-nat chain=srcnat packet-mark=local-snmp-trap to-addresses=10.0.0.10