Community discussions

MikroTik App
 
Brad
newbie
Topic Author
Posts: 34
Joined: Sat May 29, 2004 8:58 am

NAT for trusted IP

Thu Aug 13, 2009 6:20 pm

Is it possible to create a NAT that can only be used from a trusted IP or trusted range of IP's? I am needing to create a NAT for a SQL server on TCP 1433 but I don't want to open the port for the entire Internet, just from a trusted IP range where I am going to have a developer needing direct access to the port.

Thanks,
Brad
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8370
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: NAT for trusted IP

Thu Aug 13, 2009 7:05 pm

use 'src-address=your_developer_address' parameter in your DST-NAT rule
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
Brad
newbie
Topic Author
Posts: 34
Joined: Sat May 29, 2004 8:58 am

Re: NAT for trusted IP

Thu Aug 13, 2009 10:22 pm

I tried that but it didn't seem to work. Any ideas?

Thanks,
Brad
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8370
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: NAT for trusted IP

Thu Aug 13, 2009 11:40 pm

what exactly don't work?
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!

For every complex problem, there is a solution that is simple, neat, and wrong.

MikroTik. Your life. Your routing.
 
Brad
newbie
Topic Author
Posts: 34
Joined: Sat May 29, 2004 8:58 am

Re: NAT for trusted IP

Fri Aug 14, 2009 1:08 am

If I create the rule without a SRC address, I can telnet to the port. If I create it with the SRC address, I cannot telnet to the port even from the IP that is the trusted IP.
 
changeip
Forum Guru
Forum Guru
Posts: 3806
Joined: Fri May 28, 2004 5:22 pm

Re: NAT for trusted IP

Fri Aug 14, 2009 1:14 am

paste the rule here so we can see what you entered.
Colo and Wholesale Bandwidth Available! Sales at SanDiegoBroadband dot com
 
Brad
newbie
Topic Author
Posts: 34
Joined: Sat May 29, 2004 8:58 am

Re: NAT for trusted IP

Thu Aug 20, 2009 6:53 pm

add chain=dstnat action=dst-nat to-addresses=10.1.2.70 to-ports=1433 in-interface=Cox src-address=65.65.65.65 dst-address=98.98.98.98 dst-port=1433 protocol=tcp

98.98.98.98 is the static IP through the local ISP
65.65.65.65 is the IP I am attempting to trust to allow connections through from it

Who is online

Users browsing this forum: McSee and 180 guests