Mikrotik Routerboard port forwarding...

[JerryMungo]

So I have port forwarding working on my routerboard... I want port 8080 tcp forwarded to my internal server at address 192.168.0.1

The command I used is:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=8080 action=dst-nat to-addresses=192.168.0.8 to-ports=8080

The trouble is it forwards port 8080 from internal to external as well, so when I'm trying to access port 8080 on an external server, I can't get out. If I remove or disable the port forward rule, it works again. Anyone know how to specify incoming traffic via ether1-gateway only for the rule?

 

[Pada]

Specify an in-interface or dst-address in that rule. If you don't have a static IP address, then you can't use dst-address.

Are you dialing the PPPoE connection with your MikroTik router or are you doing it with your ADSL modem?

 

[JerryMungo]

Specify an in-interface or dst-address in that rule. If you don't have a static IP address, then you can't use dst-address.

Are you dialing the PPPoE connection with your MikroTik router or are you doing it with your ADSL modem?

Give that man a Bells!

Ta Pada - I was specifying ether1-gateway as the in address... I changed that to pppoe-out1 and problem solved!!

 

[Pada]

Its a pleasure.

It is still rather simple when you have 1 PPPoE interface.

Like I have 3 PPPoE connections and I have a single rule to that port forwards from any of the 3 PPPoE connections by using new chains and the "jump" action.
Of course you'll also need mangle rules to route the traffic back on the same interface

 

[JerryMungo]

Its a pleasure.

It is still rather simple when you have 1 PPPoE interface.

Like I have 3 PPPoE connections and I have a single rule to that port forwards from any of the 3 PPPoE connections by using new chains and the "jump" action.
Of course you'll also need mangle rules to route the traffic back on the same interface

Wow, sounds like a knacker-ache. What about having a pppoe for certain users only - is that a possibility? That'd be useful to me!