Tue Jun 19, 2018 3:37 pm
Hey. Don't look on bridge, it's seemless layer 1 device. In order to do hairpin nat, you should nat your own local IP in router local IP of your LAN segment in your Tik router and then nat it back to your lan device. Like this:
/ip firewall nat add action=dst-nat chain=dstnat dst-address=public IP dst-port=public port protocol=choose protocol \
to-addresses=local IP add action=masquerade chain=srcnat dst-address=public IP dst-port=public port protocol=choose protocol \
src-address=local IP