Hi

Please i got this mail from a new client

"Can you please exclude our both peers from then nat rule? Peers: 173.xx.x.xx and 178.xx.xxx.xx (public IP from a remote connection to their new site)
This 2 addresses MUST be reach the cisco router without Nat!"

Please can you help

What is your /ip firewall nat export?

0 ;;; Public Mask to NSL Server (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.1.20

1 ;;; Win Server to NAT
chain=dstnat action=dst-nat to-addresses=10.0.0.10 dst-address=41.xxx.xx.x

2 ;;; Public Ip to VoIP (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.27 dst-address=41.xxx.xx.x

3 ;;; Public IP to Enterprise (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.1.20 dst-address=41.xxx.xx.x

4 ;;; Tuns Public IP
chain=dstnat action=netmap to-addresses=10.0.2.1 dst-address=41.xxx.xx.x

5 ;;; Public Mask NSS (src)
chain=srcnat action=src-nat to-addresses=41.xxx.xx.x src-address=10.0.4.1

6 ;;; Public Mask NSS (dst)
chain=dstnat action=dst-nat to-addresses=10.0.4.1 dst-address=41.xxx.xx.x

7 ;;; Public IP to NSS (NETMAP)
chain=dstnat action=netmap to-addresses=10.0.4.1 dst-address=41.xxx.xx.x

8 ;;; **************masqueradeNSL network**************
chain=srcnat action=masquerade to-addresses=0.0.0.0

Please the client @ NSS is the one asking for this

Kindly find below thier own nat rule

NSS

0 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.16.254.0/24

1 chain=dstnat action=netmap to-addresses=172.16.254.1 dst-address=10.0.4.1

this is how i forward public IP since i have not gotten how to forward the IP given by my ISP to the client it self without netmap