Community discussions

MikroTik App
 
palloza02
just joined
Topic Author
Posts: 2
Joined: Sat Feb 25, 2023 7:09 pm

Help i need help with my iis server

Sun Feb 26, 2023 2:44 am

I can access my webb through outside my network but i stll cant access it inside my network like in my local network, can somebody help me with my nat?


heres my current config
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat disabled=yes dst-port=80 in-interface-list=\
    WAN log=yes protocol=tcp to-addresses=192.168.96.84
add action=dst-nat chain=dstnat comment=Server dst-port=80 protocol=tcp \
    to-addresses=192.168.96.84 to-ports=80
add action=dst-nat chain=dstnat comment=Server dst-port=80 protocol=udp \
    to-addresses=192.168.96.84 to-ports=80
    
    
 
palloza02
just joined
Topic Author
Posts: 2
Joined: Sat Feb 25, 2023 7:09 pm

Re: Help i need help with my iis server

Sun Feb 26, 2023 4:05 am

i was able to fix my problem with hairpin nat

but there still some problems exist
below my router hex hast another router and clients other routers cant access my web server page

attached a picture to describe my network
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: GoogleOther [Bot] and 32 guests