![]() ![]() ![]() ![]() I've also seen variations where instead of 'dst-address' they specify the 'in-interface'. The port used in the example is 1:1 mapping, that is, coming from 9090 and forwarded to port 9090. Where dst-address=10.42.0.2 is the public address from the WAN, and 192.168.0.96 is the internal server's address we want to forward to. If I follow any of the examples/tutorials about port forwarding, they mention doing: /ip firewall natĪdd chain=dstnat dst-address=10.42.0.2 protocol=tcp dst-port=9090 action=dst-nat to-address=192.168.0.96 to-port=9090Īdd chain=srcnat out-interface=WAN action=masquerade I have a server (192.168.0.96) with an HTTP service listening on port 9090, connected to one of the bridged ethernet interfaces. By default the bridged network is 192.168.0.0/24. I have an hEX Mikrotik router, factory default settings, latest firmware.īy default it comes with eth2 to eth5 bridged, and eth1 as the "WAN" port, plus a few Firewall rules.
0 Comments
Leave a Reply. |