To mám, jelikož mám v síti servery synology, na kterém mi běží pošta a web a zde jsem se dočetl, že musím použít ještě tato pravidla , abych se z vnitřní lan dostal přes zavolání do mé domény na svůj server synology, který je též v LAN. http://www.neni.cz/index.php/stavba-sit ... -mikrotiku
Synology mám 200.2 a Mikrotik router má 200.1 a Druhý synology má 200.150 a 2x VOIP jedno na 200.110 a druhé na 200.200
v Natu mám toto:
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-port=25 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=25
add action=dst-nat chain=dstnat dst-port=5060 in-interface=ether1 protocol=\
udp to-addresses=192.168.200.110
add action=dst-nat chain=dstnat dst-port=6060 in-interface=ether1 protocol=\
udp to-addresses=192.168.200.200 to-ports=6060
add action=dst-nat chain=dstnat dst-port=6065 in-interface=ether1 protocol=\
udp to-addresses=192.168.200.200 to-ports=6065
add action=dst-nat chain=dstnat dst-port=24 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=22
add action=dst-nat chain=dstnat dst-port=8080 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.150 to-ports=8080
add action=dst-nat chain=dstnat dst-port=8008 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.150 to-ports=8008
add action=dst-nat chain=dstnat dst-port=5000 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.150 to-ports=5000
add action=dst-nat chain=dstnat dst-port=5005 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.150 to-ports=5005
add action=dst-nat chain=dstnat dst-port=10001 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.29 to-ports=10001
add action=dst-nat chain=dstnat dst-port=143 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=143
add action=dst-nat chain=dstnat dst-port=80 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=80
add action=dst-nat chain=dstnat dst-port=8081 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.2 to-ports=80
add action=dst-nat chain=dstnat dst-port=465 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=465
add action=dst-nat chain=dstnat dst-port=993 in-interface=ether1 protocol=tcp \
to-addresses=192.168.200.2 to-ports=993
add action=dst-nat chain=dstnat dst-port=5002 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.2 to-ports=5000
add action=dst-nat chain=dstnat dst-port=7002 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.2 to-ports=7000
add action=dst-nat chain=dstnat dst-port=35500 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.212 to-ports=35500
add action=dst-nat chain=dstnat dst-port=8085 in-interface=ether1 protocol=\
tcp to-addresses=192.168.200.5 to-ports=8085
add action=dst-nat chain=dstnat comment=\
"Pristup na web z LAN" dst-address=!192.168.200.0/24 \
dst-address-type=local dst-port=80,143,993,465 protocol=tcp to-addresses=\
192.168.200.2
add action=masquerade chain=srcnat comment=\
"Pristup na web z LAN" protocol=tcp src-address=\
192.168.200.0/24
V původním firewallu mám toto:
/ip firewall filter
add chain=forward in-interface=ether1 protocol=icmp
add chain=forward comment="Pakety pro navazana spojeni" connection-state=\
established in-interface=ether1
add chain=forward comment="Pakety pro navazana spojeni" connection-state=\
related in-interface=ether1
add chain=forward dst-port=53,80,443,8080,143,465,993,445 out-interface=\
bridge1 protocol=tcp
add chain=forward dst-port=53,123 out-interface=bridge1 protocol=udp
add chain=forward comment=SIP dst-port=5060 protocol=udp
add chain=forward comment=SIP dst-port=6060 protocol=udp
add chain=forward comment=SIP dst-port=6065 protocol=udp
add chain=forward dst-port=80,5000,8080,5002,7002,25,465,143,993 \
in-interface=ether1 protocol=tcp
add action=drop chain=forward comment="Zakaz vseho" in-interface=ether1
Tak fakt nevím v čem je potíž.
