I have a situation where I require both source and destination NAT on the same router.
The destination NAT rule redirects inbound requests on TCP port 50010 to TCP port 1880 on a host on the LAN side of the Mirktotik.
The source NAT rule is the default rule allowing LAN hosts to access the Internet (required).
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=10.1.1.5 dst-port=50010 in-interface=ether1 protocol=tcp to-addresses=192.168.1.10 to-ports=1880
add action=masquerade chain=srcnat out-interface-list=WAN
The rules are currently working as desired. My concern is what may happen if/when the source NAT rule also happens to use TCP port 50010 ???
Is there a way to exclude that port from the source NAT?