You host servers behind your Mikrotik firewall and need to setup NAT entries for them. In this example, we will create a NAT entry for an internal email server.
- Telnet into your Mikrotik device
- Enter the following command:
ip firewall nat chain=dstnat action=dst-nat to-addresses=ServerIP to-ports=25 protocol=tcp dst-address=ExternalIP dst-port=25
- NOTE* You must include the dst-address= entry, if you do not include this entry ALL port 25 traffic will be redirected to your internal server! dst-address= specifies the IP address the firewall should listen to for inbound email.