This fixed half the problem. Users on my 192.168.25.0/27 subnet now show the correct IP address on the webserver, however it breaks hairpin NAT for the 192.168.1.0/24 subnet (which the webserver resides on).

On 6/28/2010 1:06 PM, Butch Evans wrote:
I'd double check the srcnat rules to ensure that they are NOT
natting traffic leaving on the interface that has the 192.168.1.x IP
assigned to it.  You could add a rule like:
/ip firewall nat
add chain=srcnat out-interface=LAN action=accept

Substitute the "LAN" interface for whatever interface has the
192.168.1.x address assigned.  Put that rule above all other srcnat
chain rules and see if it changes things.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<http://www.butchevans.com/pipermail/mikrotik/attachments/20100628/3819a307/attachment.html>
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://www.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to