First, please post the images here instead of on an external site.
The rule states an inbound interface whose name is "all wire..." - is that your internal (LAN) or external (WAN) interface? Given that the masquerade rule has an outgoing interface of "pppoe-...", I suspect the in-interface you set in that rule is your internal interface and not the external, in which case you have to change it (See below).
Also, What default route does your server have? I see you have two interfaces, which one is used for the return packets? The firewall and NAT are stateful and expect things to come back the same way they were sent.
Stupid question, but do you have a firewall rule that allows the traffic to your internal server (note: using the real IP, not the external)?
Lastly, if you try from the inside using the external IP, you will need to set up a hairpin NAT, which I do not see in your configuration.
Regarding the source NAT: the in-interface describes the interface which receives the packet prior to translation. In the case of a source-nat to present stuff to the Internet, the in-interface is the Internet side.
Can you send the output of the following commands, and please put that between "code" tags.
The rule states an inbound interface whose name is "all wire..." - is that your internal (LAN) or external (WAN) interface? Given that the masquerade rule has an outgoing interface of "pppoe-...", I suspect the in-interface you set in that rule is your internal interface and not the external, in which case you have to change it (See below).
Also, What default route does your server have? I see you have two interfaces, which one is used for the return packets? The firewall and NAT are stateful and expect things to come back the same way they were sent.
Stupid question, but do you have a firewall rule that allows the traffic to your internal server (note: using the real IP, not the external)?
Lastly, if you try from the inside using the external IP, you will need to set up a hairpin NAT, which I do not see in your configuration.
Regarding the source NAT: the in-interface describes the interface which receives the packet prior to translation. In the case of a source-nat to present stuff to the Internet, the in-interface is the Internet side.
Can you send the output of the following commands, and please put that between "code" tags.
Code:
/ip firewall filter export/ip firewal nat export/interface list exportStatistics: Posted by vingjfg — Sun Feb 04, 2024 10:03 am