Hi,
3 nic: lan, wan and dmz.
I want connect a server in dmz (internal ip 10.10.224.10) with external 200.200.200.107
I do these steps:
# setup lan
/ip address add address=10.10.0.2/20 interface=lan
# setup wan
/ip address add address=200.200.200.106/29 interface=wan
# setup default gateway
/ip route add gateway=200.200.200.105
# define nat for wan
/ip firewall nat add chain=srcnat action=masquerade out-interface=wan
# here all lan' clients browse the web
# setup dmz
/ip address add address=10.10.224.1/20 interface=dmz
/ip address add address=200.200.200.107/32 interface=wan
/ip firewall nat add chain=dstnat dst-address=200.200.200.107 \
action=dst-nat to-addresses=10.10.224.10
/ip firewall nat add chain=srcnat src-address=10.10.224.10 \
action=src-nat to-addresses=200.200.200.107
But:
- the server can ping internet
- the server is reached from lan
- the server can't be reached (pinged or telnet) from internet
May you help me?
Thanks in advance
v.