Hi.
I encountered a network with such a structure:
Internet ---> Keenetik(main router) ----> Mikrotik ---> LocalNetwork
Keenetik Local IP: 192.168.1.1
Mikrotik eth1 IP: 192.168.1.103
eth2 IP: 192.168.88.1
LocalNetwork SubNet: 192.168.88.0
Mikrotik RouterOS 6.47.1
I reset mikrotik, so it is default settings
Problem: I can't map ports to the LocalNetwork through Mikrotik to 192.168.88.3 - LocalComp where started nginx(for test)
1. I mapped ports 80 & 8291 on Keenetik to Mikrotik IP : 192.168.1.103 - all works fine, I can connect to Mikrotik from Internet via WinBox
2. I mapped ports on Mikrotik with /ip firewall nat add chain=dstnat dst-port=80 action=dst-nat protocol=tcp to-address=192.168.88.3 to-port=80 -- nothing work - I can't open web page on LocalMachine from Internet
I have thought it's because I don't need nat but need forward packet to next node(192.168.88.3), or probably I need add rule to input chain, as Keenetik send packets to 192.168.1.103(to input Mikrotik)
I've turned off all drop rules in firewall, then have tried:
/ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp dst-address=192.168.1.103 address-list=192.168.88.3 dst-port=80
not working. With input not working too.
Please hint me, which rules I must to add to reach from Internet LocalComp
Thanks