Page 1 of 1

RB3011

Posted: Tue Oct 04, 2022 5:16 pm
by provis
Hi all! I have a RB3011 connected to a ISP Router, the ISP Router has all ports forwarded to the interface eth1 of the mikrotik router with an 192.168.1.0/24 ip and a lan network with at 192.168.0.0/24 and I have made some NAT rules to redirect 443 trafic to a web server on my lan so I can access it from the outside but it doesn't work, I have the same config for the 80 port to other server and it works but not for the 443.

I have set up the masquerade and the dst-nat. I would be very grateful for the help.

Cheers
Leo.

Re: RB3011

Posted: Wed Oct 05, 2022 3:10 am
by Sob
You can see that dstnat rule successfully matched 48 packets (so 48 connections, because dstnat applies only to first packet of connection). And unless you added following srcnat rule only after all those 48 connections happened, they were from outside. So if it doesn't work as whole, it's probably either because of something else in your config, or something on target server.

Re: RB3011

Posted: Thu Oct 06, 2022 10:11 am
by provis
You can see that dstnat rule successfully matched 48 packets (so 48 connections, because dstnat applies only to first packet of connection). And unless you added following srcnat rule only after all those 48 connections happened, they were from outside. So if it doesn't work as whole, it's probably either because of something else in your config, or something on target server.
Hi thx for the answer, I found it's a problem with the ISP Router so I have redirected the traffic from 4430 to 443 and it worked, so I have opened a ticket with ISP support, thx for all.