what about 4.7? -------------------------------- Mario Clep
Ing. en Telecomunicaciones MikroTik Certified Network Associate CTO / MKE Solutions http://MikrotikExpert.com i...@mikrotikexpert.com Tel: (54)358 4210029 - 0358 154192733 On Wed, Apr 21, 2010 at 12:44 PM, David Sovereen <david.sover...@mercury.net> wrote: > Hairpin NAT doesn't work for us on 4.6. > > Dave > > -----Original Message----- > From: mikrotik-boun...@mail.butchevans.com > [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Rory McCann > Sent: Wednesday, April 21, 2010 10:13 AM > To: mikrotik@mail.butchevans.com > Subject: Re: [Mikrotik] Hairpin NAT > > Josh, I tried this rule and it did not seem to work. Any ideas if it's > supposed to work on OS 4.2? > > My other thought was to try to masquerade the specific traffic from the > LAN destined to the webserver IP as an IP from another subnet, however > that doesn't seem to be working either. > > Kind of at a loss here. The websites in question are just personal > websites and it's really just a workaround for my convenience. I don't > want to put this server on another subnet and I don't want to have to > mess around with the DNS on my AD server, however if I can't find > another workaround I'm probably going to have to. > > On 4/19/2010 8:28 PM, mikrotik-requ...@mail.butchevans.com wrote: >> Message: 1 >> Date: Mon, 19 Apr 2010 15:59:21 -0400 >> From: Josh Luthman<j...@imaginenetworksllc.com> >> Subject: Re: [Mikrotik] Hairpin NAT >> To: Mikrotik discussions<mikrotik@mail.butchevans.com> >> Message-ID: >> <q2w961092e11004191259wb603355ao60c843811abc3...@mail.gmail.com> >> Content-Type: text/plain; charset="windows-1252" >> >> >There may be other ways to accomplish your goal, but I don't think >> >>> spending time with trying to make hairpin nat work is a good idea. >>> >> Why not? >> >> /ip firew nat >> add action=dst-nat chain=dstnat comment="bender - http" disabled=no \ >> dst-address=!10.0.0.0/24 dst-address-type=local dst-port=80 > protocol=\ >> tcp to-addresses=10.0.0.9 to-ports=80 >> >> >> Josh Luthman >> Office: 937-552-2340 >> Direct: 937-552-2343 >> 1100 Wayne St >> Suite 1337 >> Troy, OH 45373 >> >> ?Success is not final, failure is not fatal: it is the courage to > continue >> that counts.? >> --- Winston Churchill >> > _______________________________________________ > Mikrotik mailing list > Mikrotik@mail.butchevans.com > http://www.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > RouterOS > _______________________________________________ > Mikrotik mailing list > Mikrotik@mail.butchevans.com > http://www.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS > _______________________________________________ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
