NAT Loopback & Hairpin NAT

Помечаем пакеты (всё кроме WAN)

/ip firewall mangle add chain=prerouting comment=“Hairpin NAT Detect” dst-address=87.103.194.182 in-interface-list=!WAN connection-state=new action=mark-packet new-packet-mark=hairpin_nat passthrough=yes

Помечаем пакеты (только для LAN)

/ip firewall mangle add chain=prerouting comment=“Hairpin NAT Detect” dst-address=87.103.194.182 in-interface-list=LAN connection-state=new action=mark-packet new-packet-mark=hairpin_nat passthrough=yes

Помечаем пакеты (только для Wi-Fi)

/ip firewall mangle add chain=prerouting comment=“Hairpin NAT Detect” dst-address=87.103.194.182 in-interface-list=WIFI connection-state=new action=mark-packet new-packet-mark=hairpin_nat passthrough=yes

Применяем NAT для помеченных соединений (Masquerade)

/ip firewall nat add chain=srcnat packet-mark=hairpin_nat action=masquerade comment=“Hairpin NAT”

Применяем NAT для помеченных соединений (Src-NAT)

/ip firewall nat add chain=srcnat packet-mark=hairpin_nat action=src-nat to-addresses=10.10.101.1 comment=“Hairpin NAT”