I'm wondering why you have so many src-nat rules? I'm not saying that they're not necessary, but I'd like to know what kind of use case requires do many of them. If they're intended for hair-pin bat, then they can most of times be replaced by single rule. Like these: add action=src-nat chain=srcnat...

Recently I saw that the web server, which is located inside the network, does not see the client’s IP. Instead, he displays Mikrotik's IP. # sep/21/2023 17:53:41 by RouterOS 6.47.10 # software id = 8USD-L3ZM # # model = CRS109-8G-1S-2HnD # serial number = HD6088Q2G2X /ip firewall filter add action=a...