Now this is odd, i have done this type of rule many of times but this one is puzzling me, maybe of the way my network is set.

Network setup:

Mtik Ether1 = Ether2 set as bridge Real IP and Fake ip
Fake IP has a DHCP server running on it .
0 dst-address=RealIP/32:1111 protocol=tcp action=redirect
to-dst-address=192.168.0.20 to-dst-port=21

/ip address
0 217.31.140.--/29 217.31.140.-- 217.31.140.-- bridge1
1 192.168.0.1/27 192.168.0.0 192.168.0.31 bridge1

but now if i ftp realip port 1111 i get mikrotik box, and i can not ftp Fake because it will not be seen.

So what do you guys think.

Sarky

You should use action=nat, not action=redirect. Redirect always redirects to the local MikroTik router, only action=nat allows you to redirect the traffic to another system...