Hairpin NAT (as mentioned above)
Create a rule that NAT's LAN range to LAN range with masquerade
Change port forward rules a little so destination IP is your WAN IP (see note below), remove in-interface as your WAN interface isn't used when you access from locally
**This approach works great unless you are using a dynamic WAN IP at which point you can use IP>Firewall>Address-Lists and resolve your DDNS name within the router and then use dst-address list as your "WAN IP", this gives a "dynamic" hairpin NAT.
***I generally tend to use IP>Cloud when doing this as it is then a DDNS client built into the router.
Thanks for the tip. I did some tests with hairpin but didn't work. I need to spend a bit more time to review my setup and check my config. Silly question though. The port to which my NAS is connected is acting as switch at the moment. Does that have any influence on hairpin NAT or is it transparent to it?
Indeed, the WAN IP allocated by my ISP is dynamic. I managed to resolve my DDNS with IP>Firewall>Addresses. Now how do I use that as argument to set-up the hairpin NAT?
In the example provided by the hairpin NAT documentation:
add chain=dstnat dst-address=1.1.1.1 protocol=tcp dst-port=80 action=dst-nat to-address=192.168.1.2
I understand I should replace
1.1.1.1 by the
resolved DDNS IP address and
192.168.1.2 by my NAS's
local private IP address.
Is there a way I can easily provide it as an argument instead of entering an actual IP address?
Will let you know the outcome. Thanks again for your precious help!
