Community discussions

MikroTik App
 
DirectWireless
Member Candidate
Member Candidate
Topic Author
Posts: 143
Joined: Wed Oct 06, 2004 8:09 am

Web Server logs showing same IP

Fri Feb 17, 2006 1:07 am

I have a customer using MT 2.9 that I have a masquerade setup for his public web servers (public to internal). However, it is showing on his web tracking logs that all the traffic is coming from the router's IP address. My 2.8 server does not do that. Is there something different in 2.9?

Thanks
 
User avatar
andrewluck
Forum Veteran
Forum Veteran
Posts: 700
Joined: Fri May 28, 2004 9:05 pm
Location: Norfolk, UK

Fri Feb 17, 2006 7:58 pm

Are you proxying the incoming web requests?

Regards

Andrew
 
durim
newbie
Posts: 32
Joined: Thu Oct 27, 2005 6:25 pm

Fri Feb 17, 2006 8:43 pm

I had the same problem and it was worng configured nat if you have public ip addresses than you should create a rule and accept the ip subnet .

Regards Durim
 
DirectWireless
Member Candidate
Member Candidate
Topic Author
Posts: 143
Joined: Wed Oct 06, 2004 8:09 am

Fri Feb 17, 2006 10:03 pm

Well, I don't quite remember the rules EXACTLY, but in order to make it work, I had to do a NAT like this:

dst-address=<public IP>/32 dst-port=80 protocol=tcp to-src-address=192.168.x.x action=dst-nat

On my 2.8 server I do this:
dst-address=<public IP>/32 dst-port=80 protocol=tcp to-src-address=192.168.x.x action=nat

What is the proper action on 2.9 for a web server port forward?

Thanks
 
DirectWireless
Member Candidate
Member Candidate
Topic Author
Posts: 143
Joined: Wed Oct 06, 2004 8:09 am

Fri Feb 17, 2006 10:38 pm

I got a copy of the rules I put on their system. Any help would be appreciated. Thanks

;;; Port Forward for HTTP to Web Server
chain=dstnat src-address=0.0.0.0/0 dst-address=<public IP> protocol=tcp dst-port=80 action=dst-nat to-addresses=192.168.2.5 to-ports=0-65535

;;; Port forward for HTTPS to Web Server
chain=dstnat src-address=0.0.0.0/0 dst-address=<public IP> protocol=tcp dst-port=443 action=dst-nat to-addresses=192.168.2.5 to-ports=0-65535