I solved the problem. 8) Fewi, thanks for your hints mate! /1. Services hairpin to .10 chain=dstnat action=dst-nat to-addresses=192.168.10.10 protocol=tcp dst-address=!192.168.10.0/24 dst-address-type=local dst-port=80,21 /2. NAT all traffic from local to internet chain=srcnat action=masquerade src...

I prefer split horizon DNS where you serve inside and outside clients different IP adresses for the host names. A simple way to do that is to configure the DNS proxy on the router and make static entries for your servers with their inside IPs, and configure the inside clients to use the router as t...

Search the forums for "hairpin NAT" and "split horizon DNS". Fewi, thanks for advice mate but there is very little ref to hairpin NAT and split horizon DNS in the forums. I found though this one: http://forum.mikrotik.com/viewtopic.php?f=13&t=34679&p=170070&hilit=hai...

I need your help with some very basic setup which I couldn't figure out on my own... My router maps services for WAN ports to a LAN IP server as dstnat chains while my LAN users within the LAN subnet use one srcnat chain to NAT out. The problem is that while the rest of the world gains access to my ...