using this dst-address-list with Hairpin

adalop · Sun Mar 07, 2021 3:21 pm

can't I use this kind o rule in NAT to make an exception of masq for both Mikro's IP and local DNS server in Hairpin NAT? like using this dst-address-list=!DNS where DNS have address list for both local IP and router.

add action=masquerade chain=srcnat comment="Hairpin NAT" dst-address-list=!DNS src-address=192.168.0.150
add action=dst-nat chain=dstnat dst-address-type=local dst-port=53 log=yes log-prefix=Filter17 protocol=udp src-address=192.168.0.150 to-addresses=192.168.0.33 to-ports=53
add action=dst-nat chain=dstnat dst-address-type=local dst-port=53 log=yes log-prefix=Filter6 protocol=tcp src-address=192.168.0.150 to-addresses=192.168.0.33 to-ports=53

using this dst-address-list with Hairpin

using this dst-address-list with Hairpin

Who is online