Hello!
RB750Gr3
I have Ubiquiti UCRM server setup and running on my LAN. I can access the router configuration when IP Service www service is enabled.
/ip firewall nat add chain=dstnat in-interface=ether1 protocol=tcp dst-port=80,81,443 action=dst-nat to-address=192.168.x.x
I can access the webfig and once the webfig is disabled, it still doesn’t allow web server access, but I can access the server via its local IP.
Can anyone tell me what I’m doing wrong or missing?
Dear Falklan,
You need to set the public ip address that you configure on your mikrotik interface that can see from internet on general tab of your destination-nat rule then you can tell that if any body connect to for example http://ippublic:8595 nat this destination to the 192.168.100.10:80 (i mean your web server or any other device’s on your lan).
Thanks for the response!
I noticed that no matter what I changed, there was no traffic reaching the NAT rule.
The default config masquerade NAT rules are the source. Placing the NAT rule I created above the default rule still does not allow any traffic. If I disable the default masquerade rule, it drops the Internet connection. I also disabled all the Firewall filter rules to no avail.
All the rules, with the exception of the new NAT rule, are the standard default configuration applied at initial device startup.
Are you testing from inside (same network where 192.168.x.x is) or outside (internet)? If from inside, you’re looking for http://wiki.mikrotik.com/wiki/Hairpin_NAT. If from outside, it may be something with firewall filter rules.
I was testing externally and internally. I had to change the rules posted in that wiki, but in the end, the sever is now accessible on the web using my domain. BIG SMILE!
I do appreciate the help!
Thank You!