I use foo.com because it's quick and easy to type. I know, first world
probloms...
How would I srcnat these incoming connections? If I specify chain=srcnat
in-interface=ether1 it complains "ingoing interface matching not possible
in output and postrouting chains"
I have this rule and while it counts packets, there's never any response
from a web server (there is when talking directly to 2.2.2.2)
/ip firew nat
add action=dst-nat chain=dstnat comment="redirect 80 to outside web server"
disabled=no dst-address=\
1.1.1.1 dst-port=80 in-interface=ether1 protocol=tcp
to-addresses=2.2.2.2 to-ports=80
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Mon, Aug 4, 2014 at 4:26 PM, Alexander Neilson <[email protected]>
wrote:
> You could give it a go. Would you not be better using a different A record
> for your house (home.foo.com) point the foo.com record to your web server
> and do the http redirect on that.
>
> I would just imagine you would likely need to source NAT the connection as
> well otherwise the IP reply would come to the user from a completely
> different IP address and could break NAT on the other end.
>
> Regards
>
> Alexander
>
> Alexander Neilson
> Neilson Productions Ltd
> [email protected]
> 021 329 681
>
> > On 5/08/2014, at 8:10 am, Josh Luthman <[email protected]>
> wrote:
> >
> > My home router is the A record for foo.com (1.1.1.1)
> >
> > I have an outside web server at www.foo.com (2.2.2.2)
> >
> > Is it possible for when someone goes to my MT at foo.com (1.1.1.1), the
> MT
> > does a dstnat to 2.2.2.2 ? I'd prefer to avoid having an Apache server
> > just for an HTTP redirect.
> >
> > Josh Luthman
> > Office: 937-552-2340
> > Direct: 937-552-2343
> > 1100 Wayne St
> > Suite 1337
> > Troy, OH 45373
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: <
> http://mail.butchevans.com/pipermail/mikrotik/attachments/20140804/fd91da31/attachment.html
> >
> > _______________________________________________
> > Mikrotik mailing list
> > [email protected]
> > http://mail.butchevans.com/mailman/listinfo/mikrotik
> >
> > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
> RouterOS
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 6151 bytes
> Desc: not available
> URL: <
> http://mail.butchevans.com/pipermail/mikrotik/attachments/20140805/e9b0fe51/attachment.bin
> >
> _______________________________________________
> Mikrotik mailing list
> [email protected]
> http://mail.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
> RouterOS
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.butchevans.com/pipermail/mikrotik/attachments/20140804/898b829a/attachment.html>
_______________________________________________
Mikrotik mailing list
[email protected]
http://mail.butchevans.com/mailman/listinfo/mikrotik
Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
