Hi all,
i got this configuration:
IP addresses ether1(WAN):
10.1.1.1 dst-natted to 192.168.1.1
10.1.1.2 dst-natted to 192.168.1.1
10.1.1.3 dst-natted to 192.168.1.1
10.1.1.4 dst-natted to 192.168.1.1
and in private network i got for example
192.168.1.1 src-natted to 10.1.1.1
192.168.1.10 src-natted to 10.1.1.2
192.168.1.12 src-natted to 10.1.1.3
192.168.1.13 src-natted to 10.1.1.4
but i got problem, for 192.168.1.1 and 192.168.1.13 the nat works correctly, but with 192.168.1.10 192.168.1.12 doesn't work. In connection tracking the packets are as "unreplied".
what's wrong?
Should i NAT MAC addresses and how can i do that?

everything you listed is dst-nat to 192.168.1.1.

should be dst-nat source "public address" to "private address" & src-nat source "private address" to "public address"

example:

dst-nat source WAN 10.1.1.1 to address LAN 192.168.1.1
src-nat source LAN 192.168.1.1 to address WAN 10.1.1.1
dst-nat source WAN 10.1.1.2 to address LAN 192.168.1.10
src-nat source LAN 192.168.1.10 to address WAN 10.1.1.2

and so on

everything you listed is dst-nat to 192.168.1.1.

should be dst-nat source "public address" to "private address" & src-nat source "private address" to "public address"

example:

dst-nat source WAN 10.1.1.1 to address LAN 192.168.1.1
src-nat source LAN 192.168.1.1 to address WAN 10.1.1.1
dst-nat source WAN 10.1.1.2 to address LAN 192.168.1.10
src-nat source LAN 192.168.1.10 to address WAN 10.1.1.2

and so on

sorry, my mistake... i was meaning:
10.1.1.1 dst-natted to 192.168.1.1
10.1.1.2 dst-natted to 192.168.1.10
10.1.1.3 dst-natted to 192.168.1.12
10.1.1.4 dst-natted to 192.168.1.13