Community discussions

MUM Europe 2020
Member Candidate
Member Candidate
Topic Author
Posts: 255
Joined: Tue Jul 08, 2014 3:58 pm

Question about hairpin nat

Mon Oct 24, 2016 9:39 am

As per wiki :


Basic config :
/ip firewall nat
add chain=dstnat dst-address= protocol=tcp dst-port=80 action=dst-nat to-address=
add chain=srcnat out-interface=WAN action=masquerade
Hairpin NAT:
/ip firewall nat
add chain=srcnat src-address=  dst-address= protocol=tcp dst-port=80 out-interface=LAN action=masquerade
What if I have mutiple services (ports) to reach into server ??
Could I simply omit "dst-port=80" on hairpin rule ?
User avatar
Member Candidate
Member Candidate
Posts: 224
Joined: Fri Jun 12, 2015 8:58 pm
Location: Belgrade, Serbia

Re: Question about hairpin nat

Mon Oct 24, 2016 11:16 am

That should work.
I have bigger routing table.

Who is online

Users browsing this forum: No registered users and 21 guests