Community discussions

MikroTik App
 
jandafields
Forum Guru
Forum Guru
Topic Author
Posts: 1515
Joined: Mon Sep 19, 2005 6:12 pm

Not Possible to DST-NAT traffic originating from the router?

Mon Aug 04, 2014 5:04 am

I'm trying to dst-nat traffic from the router, like this:
chain=dstnat action=dst-nat to-ports=54 protocol=udp 
     dst-address=10.0.0.1 dst-port=53 
Then, I put 10.0.0.1 into the DNS server field on the Mikrotik. However, when I do something to cause a DNS lookup (like ping google.com), it times out and the counter on the NAT rule never increases. If I use an external address in the DNS server field (like 8.8.8.8) it looks up DNS properly.

All my NAT rules for external traffic work fine ... but how do you get it to work for traffic from the router itself?

Or ... does the DNS server itself on the Mikrotik run OUTSIDE of the NAT where outgoing DNS requests from the router itself will never go through NAT?

By the way, my end goal here is to use an external DNS server that listens on port 54 instead of 53.
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1222
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: Not Possible to DST-NAT traffic originating from the rou

Mon Aug 04, 2014 9:15 am

The dst-nat chain is used on incoming packets only.
Since outgoing packets don't traverse it, that is the normal behavior.

Maybe it is time to ask Mikrotik for a <ip|name>[:port] entry in the DNS server setup...
 
jandafields
Forum Guru
Forum Guru
Topic Author
Posts: 1515
Joined: Mon Sep 19, 2005 6:12 pm

Re: Not Possible to DST-NAT traffic originating from the rou

Mon Aug 04, 2014 3:55 pm

The dst-nat chain is used on incoming packets only.
Since outgoing packets don't traverse it, that is the normal behavior.

Maybe it is time to ask Mikrotik for a <ip|name>[:port] entry in the DNS server setup...

Yes, it would be great if Mikrotik would add a PORT option to the servers field in the DNS server.

Who is online

Users browsing this forum: iDaemon and 92 guests