Ok, here is the configuration for the hotspot service, followed by ip>firewall>nat configuration below.
The hotspot service was established using the setup wizard on winbox and it works fine with our regular DSL. But when we try to feed it with internet that we get from another gateway (which is also using a mikrotik-based hotspot service), then we get the error I mentioned above. Any comments/ideas would be appreciated!
The hotspot service is running on the 192.168.2.x subnet, and hotspot-bypassed clients are also active on 192.168.1.x subnet.
Pls let me know if you need more info.
Thx
HERE’S THE ip hotspot> print
Flags: X - disabled, I - invalid, S - HTTPS
NAME INTERFACE ADDRESS-POOL PROFILE IDLE-TIMEOUT
1 hs-hotspot hotspot hs-pool-2 hsprof3 5m
AND, HERE’S THE ip hotspot profile> print
Flags: * - default
0 * name=“default” hotspot-address=0.0.0.0 dns-name=“” html-directory=hotspot rate-limit=“” http-proxy=0.0.0.0:0 smtp-server=0.0.0.0
login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
1 name=“HeisserFleckname” hotspot-address=192.168.2.5 dns-name=“HeisserFleckdns” html-directory=hotspot/img rate-limit=“” http-proxy=0.0.0.0:0
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
2 name=“hsprof1” hotspot-address=192.168.2.3 dns-name=“hotspot.info” html-directory=hotspot rate-limit=“” http-proxy=127.0.0.1:3128
smtp-server=202.52.196.165 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
3 name=“hsprof2” hotspot-address=192.168.2.3 dns-name=“hotspot.info” html-directory=hotspot rate-limit=“” http-proxy=127.0.0.1:3128
smtp-server=202.52.196.165 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
4 name=“hsprof3” hotspot-address=192.168.2.3 dns-name=“hotspot.info” html-directory=hotspot rate-limit=“” http-proxy=127.0.0.1:3128
smtp-server=202.52.196.165 login-by=mac,cookie,http-chap http-cookie-lifetime=3d split-user-domain=no use-radius=no
AND, HERE’S THE ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; masquerade hotspot network
chain=srcnat src-address=192.168.2.0/24 protocol=tcp dst-limit=0,5,dst-address/1m40s action=masquerade
1 X chain=srcnat src-address=192.168.1.22 protocol=tcp dst-port=80 action=masquerade
2 X chain=dstnat in-interface=(unknown) src-address=192.168.1.110 dst-address=!192.168.1.100 protocol=tcp dst-port=80 dst-limit=0,5,dst-address/1m40s
action=redirect to-ports=8081
3 X chain=srcnat src-address=192.168.1.114 dst-address=!192.168.1.100 protocol=tcp dst-port=80 dst-limit=0,5,dst-address/1m40s action=masquerade
4 X chain=dstnat in-interface=(unknown) src-address=192.168.1.22 dst-address=!192.168.1.100 protocol=tcp dst-port=80 action=accept
5 chain=srcnat src-address=192.168.1.23 protocol=tcp dst-limit=0,5,dst-address/1m40s action=masquerade
6 chain=dstnat in-interface=hotspot src-address=192.168.1.23 protocol=tcp dst-port=80 dst-limit=0,5,dst-address/1m40s action=accept
7 chain=srcnat src-address=192.168.1.26 protocol=tcp dst-limit=0,5,dst-address/1m40s action=masquerade
8 chain=dstnat in-interface=hotspot src-address=192.168.1.26 dst-limit=0,5,dst-address/1m40s action=accept
9 X chain=srcnat src-address=192.168.1.51 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
10 X chain=dstnat in-interface=hotspot src-address=192.168.1.51 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
11 X chain=srcnat src-address=192.168.1.53 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
12 X chain=dstnat in-interface=hotspot src-address=192.168.1.53 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
13 X chain=srcnat src-address=192.168.1.54 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
14 X chain=dstnat in-interface=hotspot src-address=192.168.1.54 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
15 X chain=srcnat src-address=192.168.1.71 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
16 X chain=dstnat in-interface=hotspot src-address=192.168.1.66 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
17 X chain=srcnat src-address=192.168.1.96 dst-limit=0,5,dst-address/1m40s action=masquerade
18 X chain=dstnat in-interface=hotspot src-address=192.168.1.96 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
19 chain=srcnat src-address=192.168.1.112 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
20 X chain=dstnat in-interface=hotspot src-address=192.168.1.112 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
21 chain=srcnat src-address=192.168.1.114 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
22 chain=dstnat in-interface=hotspot src-address=192.168.1.114 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
23 X chain=srcnat src-address=192.168.1.121 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
24 X chain=dstnat in-interface=hotspot src-address=192.168.1.121 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
25 X chain=srcnat src-address=192.168.2.0/24 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
26 X chain=dstnat in-interface=hotspot src-address=192.168.2.0/24 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
27 X chain=srcnat src-address=192.168.1.126 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
28 X chain=dstnat in-interface=hotspot src-address=192.168.1.126 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
29 X chain=srcnat src-address=192.168.1.131 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
30 X chain=dstnat in-interface=hotspot src-address=192.168.1.131 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
31 X chain=srcnat src-address=192.168.1.137 protocol=tcp dst-port=22 dst-limit=0,5,dst-address/1m40s action=masquerade
32 X chain=dstnat in-interface=(unknown) src-address=192.168.1.137 protocol=tcp dst-port=22 dst-limit=0,5,dst-address/1m40s action=accept
33 X chain=srcnat src-address=192.168.1.151 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
34 X chain=dstnat in-interface=hotspot src-address=192.168.1.151 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
35 X chain=srcnat src-address=192.168.1.146 dst-limit=0,5,dst-address/1m40s action=masquerade
36 X chain=dstnat in-interface=hotspot src-address=192.168.1.146 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
37 X chain=srcnat src-address=192.168.1.156 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
38 X chain=dstnat in-interface=hotspot src-address=192.168.1.156 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
39 X chain=srcnat src-address=192.168.1.161 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
40 X chain=dstnat in-interface=hotspot src-address=192.168.1.161 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
41 chain=srcnat src-address=192.168.2.137 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
42 X chain=dstnat in-interface=hotspot src-address=192.168.2.137 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
43 chain=srcnat src-address=192.168.2.166 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
44 chain=srcnat src-address=192.168.2.71 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=masquerade
45 chain=srcnat src-address=192.168.1.151 protocol=tcp dst-port=!80 connection-limit=3,32 dst-limit=0,5,dst-address/1m40s action=masquerade
46 chain=srcnat src-address=192.168.1.110 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
47 chain=srcnat src-address=192.168.1.151 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
48 chain=srcnat src-address=192.168.1.96 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
49 chain=srcnat src-address=192.168.1.171 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
50 chain=srcnat src-address=192.168.1.52 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
51 chain=srcnat src-address=192.168.1.56 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
52 chain=srcnat src-address=192.168.1.61 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
53 chain=srcnat src-address=192.168.1.71 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
54 chain=srcnat src-address=192.168.1.146 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
55 chain=srcnat src-address=192.168.1.110 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
56 chain=dstnat src-address=192.168.1.110 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
57 chain=srcnat src-address=192.168.1.25 protocol=tcp dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
58 chain=dstnat src-address=192.168.1.25 protocol=tcp dst-limit=0,5,dst-address/1m40s action=accept
59 chain=srcnat src-address=192.168.1.151 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
60 chain=dstnat src-address=192.168.1.151 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
61 chain=srcnat src-address=192.168.1.96 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
62 chain=dstnat src-address=192.168.1.96 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
63 chain=srcnat src-address=192.168.1.171 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
64 chain=dstnat src-address=192.168.1.171 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
65 chain=srcnat src-address=192.168.1.52 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
66 chain=dstnat src-address=192.168.1.52 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
67 chain=srcnat src-address=192.168.1.56 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
68 chain=dstnat src-address=192.168.1.56 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
69 chain=srcnat src-address=192.168.1.61 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
70 chain=dstnat src-address=192.168.1.61 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
71 chain=srcnat src-address=192.168.1.71 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
72 chain=dstnat src-address=192.168.1.71 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
73 chain=srcnat src-address=192.168.1.146 dst-limit=0,5,dst-address/1m40s action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
74 chain=dstnat src-address=192.168.1.146 protocol=tcp dst-port=!25 dst-limit=0,5,dst-address/1m40s action=accept
75 chain=srcnat src-address=192.168.1.0/24 protocol=tcp dst-port=!80 action=masquerade
76 chain=dstnat in-interface=hotspot src-address=192.168.1.0/24 dst-address=!192.168.1.100 protocol=tcp dst-port=80 dst-limit=0,5,dst-address/1m40s
action=redirect to-ports=3128
77 chain=srcnat src-address=192.168.1.22 protocol=icmp action=masquerade
78 chain=srcnat src-address=192.168.1.23 protocol=icmp action=masquerade
79 chain=srcnat src-address=192.168.1.24 protocol=icmp action=masquerade
80 chain=srcnat src-address=192.168.1.25 protocol=icmp action=masquerade
81 chain=srcnat src-address=192.168.1.26 protocol=icmp action=masquerade
82 chain=srcnat src-address=192.168.1.96 protocol=icmp dst-limit=0,5,dst-address/1m40s action=masquerade
83 chain=srcnat src-address=192.168.1.71 protocol=icmp dst-limit=0,5,dst-address/1m40s action=masquerade
84 chain=srcnat src-address=192.168.1.111 protocol=icmp action=masquerade
85 chain=srcnat src-address=192.168.1.112 protocol=icmp dst-limit=0,5,dst-address/1m40s action=masquerade
86 chain=srcnat src-address=192.168.1.114 protocol=icmp action=masquerade
87 chain=srcnat src-address=192.168.1.115 protocol=icmp action=masquerade
87 chain=srcnat src-address=192.168.1.115 protocol=icmp action=masquerade
88 chain=srcnat src-address=192.168.1.116 protocol=icmp action=masquerade
89 chain=srcnat src-address=192.168.1.136 protocol=icmp action=masquerade
90 chain=srcnat src-address=192.168.1.137 protocol=icmp action=masquerade
91 chain=srcnat src-address=192.168.1.166 protocol=icmp action=masquerade
92 chain=srcnat src-address=192.168.1.222 protocol=icmp action=masquerade
93 chain=srcnat src-address=192.168.1.23 protocol=tcp dst-port=25 action=src-nat to-addresses=124.81.237.179 to-ports=0-65535
94 chain=dstnat in-interface=hotspot src-address=192.168.1.23 protocol=tcp dst-port=25 action=accept
95 chain=dstnat in-interface=hotspot src-address=192.168.1.25 protocol=tcp dst-port=25 action=accept
96 chain=dstnat in-interface=hotspot src-address=192.168.1.26 protocol=tcp dst-port=25 action=accept
97 X chain=dstnat in-interface=(unknown) src-address=192.168.1.114 protocol=tcp dst-port=21 action=accept
98 X chain=dstnat in-interface=(unknown) src-address=192.168.1.137 protocol=tcp dst-port=25 action=accept
99 chain=dstnat in-interface=hotspot src-address=192.168.1.52 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
100 chain=dstnat in-interface=hotspot src-address=192.168.1.0/24 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.160 to-ports=25
101 chain=dstnat in-interface=hotspot src-address=192.168.1.22 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
102 chain=dstnat in-interface=hotspot src-address=192.168.1.37 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
103 chain=dstnat in-interface=hotspot src-address=192.168.1.41 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
104 chain=dstnat in-interface=hotspot src-address=192.168.1.46 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
105 chain=dstnat in-interface=hotspot src-address=192.168.1.54 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
106 chain=dstnat in-interface=hotspot src-address=192.168.1.53 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
107 chain=dstnat in-interface=hotspot src-address=192.168.1.52 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
108 chain=dstnat in-interface=hotspot src-address=192.168.1.56 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
109 chain=dstnat in-interface=hotspot src-address=192.168.1.61 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
110 chain=dstnat in-interface=hotspot src-address=192.168.1.66 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
111 chain=dstnat in-interface=hotspot src-address=192.168.1.71 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
112 chain=dstnat in-interface=hotspot src-address=192.168.1.76 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
113 chain=dstnat in-interface=hotspot src-address=192.168.1.81 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
114 chain=dstnat in-interface=hotspot src-address=192.168.1.86 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
115 chain=dstnat in-interface=hotspot src-address=192.168.1.91 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
116 chain=dstnat in-interface=hotspot src-address=192.168.1.92 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
117 chain=dstnat in-interface=hotspot src-address=192.168.1.96 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
118 chain=dstnat in-interface=hotspot src-address=192.168.1.112 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
119 chain=dstnat in-interface=hotspot src-address=192.168.1.114 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
120 chain=dstnat in-interface=hotspot src-address=192.168.1.121 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
121 chain=dstnat in-interface=hotspot src-address=192.168.1.126 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
122 chain=dstnat in-interface=hotspot src-address=192.168.1.131 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
123 chain=dstnat in-interface=hotspot src-address=192.168.1.136 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
124 chain=dstnat in-interface=hotspot src-address=192.168.1.142 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
125 chain=dstnat in-interface=hotspot src-address=192.168.1.146 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
126 chain=dstnat in-interface=hotspot src-address=192.168.1.151 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
127 chain=dstnat in-interface=hotspot src-address=192.168.1.156 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
128 chain=dstnat in-interface=hotspot src-address=192.168.1.161 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
129 chain=dstnat in-interface=hotspot src-address=192.168.1.166 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
130 chain=dstnat in-interface=hotspot src-address=192.168.1.176 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.165 to-ports=25
131 chain=dstnat in-interface=hotspot src-address=192.168.1.0/24 protocol=tcp dst-port=25 action=dst-nat to-addresses=202.52.196.160 to-ports=25
132 chain=dstnat in-interface=hotspot src-address=192.168.1.41 protocol=tcp dst-port=587 action=accept
133 chain=dstnat in-interface=hotspot src-address=192.168.1.0/24 protocol=tcp dst-port=587 action=dst-nat to-addresses=202.52.196.165 to-ports=25
134 chain=dstnat in-interface=hotspot src-address=192.168.1.0/24 protocol=tcp dst-port=8025 action=dst-nat to-addresses=202.52.196.160 to-ports=25
135 chain=dstnat src-address=202.52.196.160 protocol=tcp dst-port=25 action=log log-prefix=“Someone is sending Email via SMTP -”
136 chain=dstnat src-address=202.52.196.165 protocol=tcp dst-port=25 action=log log-prefix=“Someone is sending Email via CC -”
137 X chain=dstnat in-interface=(unknown) src-address=202.52.196.178 protocol=tcp dst-port=25 src-mac-address=00:50:8B:2F:DF:DC action=dst-nat
to-addresses=202.52.196.160 to-ports=25
138 chain=dstnat in-interface=hotspot src-address=202.52.196.0/24 protocol=tcp dst-port=25 src-mac-address=00:50:8B:2F:DF:DC action=dst-nat
to-addresses=202.52.196.160 to-ports=25
139 X chain=srcnat out-interface=hotspot src-address=192.168.2.0/24 protocol=tcp dst-port=25 action=src-nat to-addresses=202.52.196.181 to-ports=0-65535
140 X chain=srcnat out-interface=(unknown) src-address=192.168.2.0/24 protocol=tcp dst-port=25 action=src-nat to-addresses=222.124.35.117 to-ports=0-65535
141 chain=dstnat in-interface=WAN src-address=202.52.204.19 protocol=tcp dst-port=5900 action=dst-nat to-addresses=192.168.1.23 to-ports=5900
142 X chain=dstnat in-interface=WAN src-address=202.52.204.19 protocol=tcp dst-port=10000 action=dst-nat to-addresses=192.168.1.23 to-ports=10000
143 chain=dstnat in-interface=WAN protocol=tcp dst-port=10000 action=dst-nat to-addresses=192.168.1.25 to-ports=10000
144 chain=dstnat in-interface=WAN protocol=tcp dst-port=8333 action=dst-nat to-addresses=192.168.1.25 to-ports=8333
145 chain=dstnat in-interface=WAN protocol=tcp dst-port=3389 action=dst-nat to-addresses=192.168.1.26 to-ports=3389
146 chain=dstnat in-interface=WAN protocol=tcp dst-port=81 action=dst-nat to-addresses=192.168.1.25 to-ports=81
147 chain=dstnat in-interface=WAN protocol=tcp dst-port=10001 action=dst-nat to-addresses=192.168.1.23 to-ports=10000
148 chain=dstnat in-interface=WAN protocol=tcp dst-port=5900 action=dst-nat to-addresses=192.168.1.23 to-ports=5900
149 X chain=dstnat in-interface=(unknown) src-address=202.52.204.19 protocol=tcp dst-port=23 action=dst-nat to-addresses=192.168.1.5 to-ports=23
150 chain=srcnat src-address=202.52.196.166 action=masquerade
151 chain=srcnat src-address=192.168.2.0/24 action=masquerade