Any helps would be appreciated. Trying to get Hairpin NAT working on my LAN at home and followed the exact instructions as in http://wiki.mikrotik.com/wiki/Hairpin_NAT, which has not worked. Only difference is that I am using the 172.x.x.x addressing scheme over a bridged "LAN" interface.
Code: Select all
/ip firewall nat
add action=masquerade chain=srcnat comment=NAT disabled=no out-interface=\
"IBB DSL WAN"
add action=masquerade chain=srcnat comment="" disabled=no dst-address=\
172.29.1.11 dst-port=80 out-interface=LAN protocol=tcp src-address=\
172.29.1.0/24
add action=dst-nat chain=dstnat comment=MSTSC disabled=no dst-address=\
83.141.117.106 dst-port=3389 in-interface="IBB DSL WAN" protocol=tcp \
to-addresses=172.29.1.10 to-ports=3389
add action=dst-nat chain=dstnat comment="HTTP Server" disabled=no \
dst-address=83.141.117.106 dst-port=80 in-interface="IBB DSL WAN" \
protocol=tcp to-addresses=172.29.1.11 to-ports=80The other rules are just torrent and game forwarding rules to other machines.
Funny enough, on this Mikrotik I have 2 LANs. One handing out a 192 and the other handing out 172's with the HTTPS server physical connected to the Mikrotik but part of one of the LAN Bridges when the client is on either of these networks trying to connect to the HTTP server it just times out. I've also attached some wireshark captures. Any help would be appreciated.
172.29.1.10 is the client .11 is the HTTP server
