I have a Mikrotik 750 router. I have an SVN server set up to run over https on server 192.168.1.111. I am going to have multiple machines using the standard ssl port so I decided to use port forwarding. From outside the firewall something would hit my public ip via svn.mydomain.com:5555 and it would forward to my machine 192.168.1.111:443
chain=dstnat action=dst-nat to-addresses=192.168.1.111 to-ports=443 protocol=tcp in-interface=ether1-gateway dst-port=5555
Everything works fine until I try use SVN behind the firewall. Of course I can access the server directly; however, that would mean changing the configuration every time I want to commit as I work from in and out of the network. I would rather be able to hit svn.mydomain.com:5555 from behind the firewall. What rule am I missing?
Note: I'm using master/slave configuration
;;; hairpin rule (not sure if to port is causing problems) chain=srcnat action=masquerade to-ports=443 protocol=tcp src-address=192.168.1.0/24 dst-address=192.168.1.111 out-interface=ether2-master-local dst-port=5555 ;;; another rule I tried chain=dstnat action=dst-nat to-addresses=192.168.1.111 to-ports=443 protocol=tcp dst-address=192.168.1.111 dst-address-type=local in-interface=ether2-master-local dst-port=5555