Hello
I have a far computer with ip : 10.0.0.222
it’s default gate-way is 10.0.0.2 (the Router with IP 91.135.1.10)
now I have add 3 rules in the NAT
0 chain=srcnat action=masquerade
1 chain=dstnat action=dst-nat to-addresses=10.0.0.222 to-ports=0-60000
protocol=udp dst-address=91.135.1.10 in-interface=ppp-out1
dst-port=0-60000
2 chain=dstnat action=dst-nat to-addresses=10.0.0.222 to-ports=0-60000
protocol=tcp dst-address=91.135.1.10 in-interface=ppp-out1
but when I try to connect to the computer by using the Remote Desktop I get error
why is it?
can someone explain me what is the mistake?
Thanks ,

add your outgoing interface:
/ip firewall nat set 0 out-interface=ppp-out1
because you only want the traffic leaving the router out of ppp-out1 be masqed
here is the problem the to-ports - range you specified. Remove the rules 1 and 2. For RDP you only need one line
/ip firewall nat add chain=dstnat action=dst-nat to-address=10.0.0.222 protocol=tcp dst-address=91.135.1.10 in-interface=ppp-out1 dst-port=3389
still not working
this is what I have now
0 chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ppp-out1
1 chain=dstnat action=dst-nat to-addresses=10.0.0.220 protocol=tcp dst-address=91.135.1.10
in-interface=ppp-out1 dst-port=3389
I can see that there is a “movement” in the rule ,but I still get error
CHAIN ACTION BYTES PACKETS
0 srcnat masquerade 706 204 16 089
1 dstnat dst-nat 252 5
??
Thanks ,
I think my problem is config in the computer
the far computer is old and using windows 2000 NT
but when I try to do it on a newer windows Windows 7
it-work!
Thanks a lot!!!
maybe you will know - why the far computer is gets “log out” when I connect him with the remote desktop?
yes fren,
you must run RDP as multiuser and multisession, xp or win7 will kick_off user when other user login in,..
where do I change it so the RDP will as multiuser and multisession?
I have try ,but didn’t found where to change
thanks ,