Problem with access to server via domain name

IgorKa · Fri Dec 31, 2021 12:29 pm

Hi guys
I wondering what could be the reason that the server in my local network is unreachable via domain name.
I have a domain name like

server.example.com

When I try to connect from the Internet (LTE on the cell phone) then everything is working fine, but I have no access to this server from my local network
In

/ip firewall nat

I can observe that packets are coming, but in Web Browser, I have "time out"

chain=dstnat action=dst-nat to-addresses=LOCAL_SUBNET_IP to-ports=8443 protocol=tcp dst-address=PUBLIC_IP dst-port=443 log=no log-prefix=""

One more thing, I have the default router configuration.

Thanks in advance for your help!

Sob · Fri Dec 31, 2021 1:39 pm

The thing you're looking for is called hairpin NAT and simplest fix is:

/ip firewall nat
add chain=srcnat src-address=LOCAL_SUBNET/MASK dst-address=LOCAL_SUBNET/MASK action=masquerade

Bit more about it: viewtopic.php?p=892135#p892135

anav · Fri Dec 31, 2021 3:46 pm

At least link to the beginning of the thread LOL.
viewtopic.php?p=892135#p885249

But correct does sound more hairpin than ISP connectivity.

Sob · Fri Dec 31, 2021 3:55 pm

@anav: Your post is mostly about dstnat (which is ok), but since OP already has the best dstnat rule, I just wanted to add a bit more specifically about the srcnat part.

anav · Sat Jan 01, 2022 2:20 am

Sounds good just let me know if I should beef up any part of the first post..................

Problem with access to server via domain name

Problem with access to server via domain name

Re: Problem with access to server via domain name

Re: Problem with access to server via domain name

Re: Problem with access to server via domain name

Re: Problem with access to server via domain name

Who is online