Web Server Behind the RB

RouterOS General
1

OK I have searched and searched and have not found it!! Sorry if its here and I have overlooked it.

My Question

I have a web server behind the router. Using a private IP I have a dst-nat and a src-nat pointing to and from the web server with its public ip xxx.xxx.xxx.242

This has worked for a few years now and no problems!!

EXCEPT every request to the web server is from the router’s IP NOT the requesting client!! So if I was to look at the logs all I ever see it the routers private IP

Is there a way to pass the client to the Web server keeping the clients IP? This is also true for the FTP server

I know the easy way it to move the servers to the public side of the T1’s however I like them behind the router!! Mostly for charting all traffic in and out of the 4 bonded T1’s is through Enet1 and I can see total bandwidth that way and I would lose that it the server was public

2

You’re NATing inbound traffic in the srcnat chain, most likely there’s a masquerade rule that is too broad. You should add an out-interface=WAN qualifier to that rule.

If you’re unsure, post your NAT rules here to get a specific correction.