Ah, thanks so much y'all! Turns out it my issue was the in-interface-list=WAN in the original dst-nat rule. I got a real kick out of Sob's bit there,
The final working rules are
But here we are.it's foolproof, you can't mess it up (ok, I know I underestimate creativity of some people)
The final working rules are
Code:
chain=dstnat action=dst-nat to-addresses=<Server LANIP> to-ports=80 protocol=tcp dst-address=!192.168.88.1 dst-address-type=local dst-port=80 chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address=192.168.88.0/24 Statistics: Posted by OctarineGlow — Fri Jan 19, 2024 9:06 pm