Web Server Behind Mikrotik, Web server receives mikrotik ip as client ip everytime

RouterOS Beginner Basics
1

20 chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=80 protocol=tcp in-interface=0-WAN dst-port=80 log=no log-prefix=“”
21 chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=443 protocol=tcp in-interface=0-WAN dst-port=443 log=no log-prefix=“”
22 X chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=8083 protocol=tcp in-interface=0-WAN dst-port=8083 log=no log-prefix=“”
23 chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=22 protocol=tcp in-interface=0-WAN dst-port=22 log=no log-prefix=“”
24 chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=21 protocol=tcp in-interface=0-WAN dst-port=21 log=no log-prefix="
while browsing website from outer world the web server receives client ip as 192.168.88.1 not the real ip.

2

Your default src-nat (most likely action=masquerade) is defined too loosly.
I’d bet it’s

/add chain=srcnat  dst-address=0.0.0.0/0 action=masquerade

Adjust it to:

/add chain=src-nat  src-address=192.168.88.0/24 dst-address=0.0.0.0/0 out-interface=your_WAN_interface action=masquerade

…and it should work.
As a side note: in case you have a static WAN ip address, use action=src-nat and to-afddress=your_WAN_ip
-Chris

3

It’s Working :slight_smile: Thank You