[vpsFree.cz: community-list] Port Forward Mikrotik Router

[Tomas Meszaros]

ahojte,
[admin at MikroTik] /ip firewall nat> print all 
Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; defconf: masquerade
      chain=srcnat action=masquerade out-interface=pppoe-out1 

 1    ;;; server advice
      chain=dstnat action=dst-nat to-addresses=192.168.55.21 to-ports=3389 
      protocol=tcp dst-port=1015 log=no 

 2    ;;; server-alf
      chain=dstnat action=dst-nat to-addresses=192.168.55.66 to-ports=1968 
      protocol=tcp dst-port=1968 log=no 

 3    ;;; ssh-advice
      chain=dstnat action=dst-nat to-addresses=192.168.55.20 to-ports=22 
      protocol=tcp dst-port=22 log=no

Skusal som to pravidlo, funguje : ale potom mi prestalo fungovat ssh von mimo siet :)

tomas

On 14. 8. 2016, at 18:04, Michal Dobsovic <dobsovic at itlearning.sk> wrote:

Pozri si, ako mas nastaveny srcnat (to pravidlo, kde mas masquerade). Ak tam nemas ziadne pravidlo, mas iba vseobecne masquerade (na prvej zalozke nemas vybrate nic okrem srcnat) , mas to zle. Ak tam mas out interface, tiez to nebude fungovat.
Daj si do srcnat pravidlo Src address adresu lokalnej siete (napr. 192.168.1.0/24) a out interface ether1 (alebo teda wan interface) daj prec.

Tym padom ti bude robit src natting aj vtedy, ked sa ma paket "otocit" na routeri. Mne to takto funguje. Snad som pomohol.

M.

-----Original Message-----
From: community-list-bounces at lists.vpsfree.cz [mailto:community-list-bounces at lists.vpsfree.cz] On Behalf Of Tomas Meszaros
Sent: Sunday, August 14, 2016 1:30 PM
To: vpsFree.cz Community list <community-list at lists.vpsfree.cz>
Subject: [vpsFree.cz: community-list] Port Forward Mikrotik Router

Ahojte, je to asi offtopic ale chcel by som poprosit o radu co musim este nastavit v routeros mikrotiku ked chcem port forward.
isiel som podla navodu
http://www.icafemenu.com/how-to-port-forward-in-mikrotik-router.htm
Funguje to ale iba z vonka ked som mimo danej sieti.
Pokial som v tej sieti a chcem sa napojit napr na mojamasina.sk:1212 tak ma nepripoji.
Ked to skusim ale z inej ip ktora nieje sucast danej siete tak ma krasne napoji.

Vdaka za kazdu radu

arty
_______________________________________________
Community-list mailing list
Community-list at lists.vpsfree.cz
http://lists.vpsfree.cz/listinfo/community-list
_______________________________________________
Community-list mailing list
Community-list at lists.vpsfree.cz
http://lists.vpsfree.cz/listinfo/community-list