MikroTik

hi, i'm trying to do portforwarding with mikrotik 3.24 version but it doesn't work with pcc loadbalancing, i have to mark users through an especific route.

the way i portforward to my clients is like this.

ip firewall/mangle/nat

add action=netmap chain=dstnat comment="distribuidora" disabled=no in-interface=DEDICADO to-addresses=192.168.20.200

before this rule i mark this user to enroute through DEDICADO.

i'll apreciate your answer.... thanks.

What does port forwarding have to do with routing (load balancing)? those are 2 independent things.

You just need to ensure that, if requests comes from GW1, then all answers will be sent via the same gateway back.

So you need additional mark-connection rules for cases when "in-interface" is specific interface.

One problem that I found is - these rules can remark connections that already have other marks, so i created 2 mark routing rules with passtrough=no before them, just to be sure.

hi, my users don't have public ip address, but i have users that need open ports,
i'm using a load balancing with pcc, it works perfect, but when i need to portforward ports to my users, i have to mark those users to enroute through an especific route and create a rule with in interface "the interface that they are enrouting" and netmap to theirs private ip address.
i hope you understand my problem, and thanks... sorry for my english.

What does port forwarding have to do with routing (load balancing)? those are 2 independent things.

You just need to ensure that, if requests comes from GW1, then all answers will be sent via the same gateway back.

So you need additional mark-connection rules for cases when "in-interface" is specific interface.

One problem that I found is - these rules can remark connections that already have other marks, so i created 2 mark routing rules with passtrough=no before them, just to be sure.

If I understood you correctly - you need to make port forwarding from both (all) public IPs, not just one, then it should be fine if you ensure that connections will get replies via same interfaces first packet came in.