Video

Came here 7 years later to say thanks, and nice to see you running Winbox on Ubuntu!

Thank you very much for the clear explanation. Worked for me as well. Although I made one small change. Rather than using DDNS, I copied somebody else's script (found on Mikrotik forum) so the DHCP client updates the address list by itself: :if ($bound=1) do={ /ip firewall address-list set [/ip firewall address-list find where comment="wan1ip"] address=$"lease-address" disabled=no } else={ /ip firewall address-list set [/ip firewall address-list find where comment="wan1ip"] disabled=yes }

I've been struggling with port forwarding on :80 for quite some time, untill I've found THIS GOLD!!! Thank You Very Much!!!!!!!!!!! Great tutorial, 100% worked for me.

FUCKING AWESOME

Great solution, thx

Thanks

Is that done with default router setup from microtick ??

Hello, i hope you're still active and I appreciate how useful this is. Can you make a tutorial similar to this but with ROS v7? I've been having a hard time figuring it out. Thanks!

Thank you a ton! this helped me figuring out the NAT Loopback issue I had.

Amazing clear and funny explanation! After searching around for quite some time, this helped me a lot! Let alone the lovely English accent. :)

Thank you so much ... have been on this for months

Great, it works!

Thank you this should be page one on search engines not a random link on the forums

thank you. some people just want to overcomplicate this process for some reason but most people dont need all 300 options available in routeros

Aaah. Very clever. But even more importantly, very elegant! Just what I need. Subscribed.

The best explanation on hairpin NAT with Dynamic IP. Thank you!

Hi Steve, thanks for the clear and well made video tutorial. I just tried this in RouterOS7 but can’t get it to work, there is a different where the routing mark has to be added as a routing table first however it still didn’t work for me, I lose all internet connectivity when adding the IP Route. Not sure if you’re still into MikroTik gear but if so any pointers would be appreciated. Thanks.

Hello, thanks for the video, I have a question, how do I do it for my clients with a PPoE connection?

Awesome, someone explaining Hairpin NAT straight forward and so easy to implement

This tutorial saved me after 8 hours of trial and error. Thanks a lot!

Hi. Do you know by any chance why I can't remove Dynamic Servers??

Hey Steve do you want to shoot me an email, the bent pins on my hard drive means all my emails are gone gone gone, but did care about the addresses!!

You're awesome! Helped me a lot!

Amazing! Thank you, sir! I come from the Linux perspective where this is much easier, but thanks to your explanation which builds a bridge for me now I understand how to achieve it on Mikrotik router (which happens to be my ISP's choice). Respect!

wonderful. my buferbload now is excelent thanks

Theres a bunch of dynamic servers in the dns settings that i cannot seem to change from that window - is that something ISP-specific or can I actually change it albeit from some other place?

I’ve been looking at a mikrotik router for a while, I currently have/use the edge router x which is a fantastic piece of kit, can do pretty much everything you want, however it doesn’t support cake SQM which is a shame as a online gamer I need the lowing ping/spikes possible, can you recommend a mikrotik router to go for? Thanks.

Thank you so much for this! I didn't find any documentation providing a rule that would work (at all and on top of that) for everything at once before yours. Also I'm now using address lists thanks to you! Cheers mate!

Thanks man that was a issue for me for long

I don't think the hairpin nat rule need to be on the top. The normal nat rule has the out_interface=ether1 condition so it will not catch those.

You have the gift my friend, taking a complicated subject and breaking it down into steps that are understandable. There are a lot of over engineered solutions to this, and yours is by far one of the easiest to comprehend. Worked for me on the first go. The humor in the video was also appreciated :)

Thank you so much for this helpful explanation!

Very helpfull thank you

Hey this one helped me a lot. Now im back to mikrotik because of your video! Cheers mate.

Hi! How to modify this if I have two vlans and I would like to access via public IP from lan1 a website which is published in lan2? Thanks in advance!

very helpfull , thank you , i used to only create mark-routing mangle and i should ve disabled my default internet gateway and created a seperate route for the vpn host address it self to be able to connect , and whole thing was a mess . now with mark-connection mangle it works flawless . not disabling the default internet gateway lets me use domains in vpn server config and not the actual ip address . thanks a lot

Very good!!! Is there a way to show the actual IP of the client and not the router IP? thanks

Thank you kind Sir!

Tranks, deu certo aqui.

Thank you for this, indeed helpful. Would you mind updating it for somewhat more recent version of MikroTikOS (7) ? Also in my case, this method is working, however the connection to the internet via the tunnel is painfully slow. Yet local addresses on the other end of the VPN are working just fine.

Thank you finally I found this solution! Been looking this for weeks.

this is quite old but I am curious how often; or how fast the Dynamic host for the Mikrotik cloud address checks for different IP.

LEGEND!!! Thank you for this

Whats the best queue type for varying bandwidth? From like 80MBit/s to 20MBit/s?

Thanks!)

Quiet dificult to make it easier, thanks

Thank you. Bufferbloat rating now A.

Nice video - My Unify gateway died so I hauled out an RB2011 I had lying around. (Public holiday so had to work with what I have and to be fair its a good device). The one remaining thing was accessing my web server internally - I could have just fiddled with internal DNS to point to the internal server but thats messy. This was easy and the hairpin NAT helps a lot.

Thanks, your video helped me a lot.

Can you have a separate tutorial on how to do this for IPSec VPN which covers - specific websites that bypass ipsec vpn tunnel - specifc websites to specific ipsec peer