No se abren las paginas muestra esto

[isaacr_22]

Hola,
Una mano.
Al pegar la regla del nat me quedo sin internet y me muestra esto al abrir una pagina, que puede ser.
saludos

[roxdng]

NO tengo una bola de cristal.

publica tus reglas nat.

[isaacr_22]

Hola amigo esto es lo que tengo


/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
    tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=\
    10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s \
    tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s \
    udp-stream-timeout=3m udp-timeout=10s

/ip firewall filter
add action=accept chain=forward comment="Acepta thunder 3.1.x" disabled=no \
    src-address=192.168.10.0/24

/ip firewall mangle
add action=mark-connection chain=postrouting comment="THUNDER CACHE FULL(TC 3.1.\
    x) =========================================================================\
    =============================" content="X-Cache: HIT from Thunder" \
    disabled=no new-connection-mark=thunder-connection passthrough=yes \
    protocol=tcp src-address=192.168.10.2
add action=mark-packet chain=postrouting connection-mark=thunder-connection \
    disabled=no new-packet-mark=thunder-packs passthrough=yes
add action=mark-connection chain=postrouting comment="(TC 3.1.x)================\
    ============================================================================\
    =========================" content="X-Cache: HIT from proxy.routero-os.com" \
    disabled=no new-connection-mark=proxy-hits passthrough=yes protocol=tcp \
    src-address=192.168.10.2
add action=mark-packet chain=postrouting connection-mark=proxy-hits disabled=no \
    new-packet-mark=proxy-squid passthrough=yes
add action=mark-connection chain=prerouting comment=Youtube content=youtube \
    disabled=no new-connection-mark=youtube_in passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=youtube_in disabled=no \
    new-packet-mark=youtube_in passthrough=no
add action=mark-connection chain=prerouting comment="Https y Http" disabled=no \
    dst-port=443 in-interface=!ether1_wan new-connection-mark=http_up_cnx \
    passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-port=80 \
    in-interface=!ether1_wan new-connection-mark=http_up_cnx passthrough=yes \
    protocol=tcp
add action=mark-packet chain=prerouting connection-mark=http_up_cnx disabled=no \
    new-packet-mark=http_up_pkt passthrough=no
add action=mark-connection chain=prerouting comment="ICMP(Ping)" disabled=no \
    new-connection-mark=icmp_conex passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting connection-mark=icmp_conex disabled=no \
    new-packet-mark=icmp passthrough=no
add action=mark-connection chain=prerouting comment=DNS disabled=no dst-port=53 \
    new-connection-mark=dns_conex passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-port=53 \
    new-connection-mark=dns_conex passthrough=no protocol=udp
add action=mark-packet chain=prerouting connection-mark=dns_conex disabled=no \
    new-packet-mark=dns passthrough=no
add action=mark-connection chain=prerouting comment=Msn disabled=no dst-port=\
    1863 in-interface=!ether1_wan new-connection-mark=msn_conex passthrough=yes \
    protocol=tcp
add action=mark-packet chain=prerouting connection-mark=msn_conex disabled=no \
    new-packet-mark=msn passthrough=no
add action=mark-connection chain=prerouting comment=WinBox disabled=no \
    dst-port=8292 new-connection-mark=winbox_conex passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-port=20561 \
    new-connection-mark=winbox_conex passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=winbox_conex disabled=\
    no new-packet-mark=winbox_pkt passthrough=no
add action=mark-connection chain=postrouting comment="Winbox 2" \
    connection-mark=winbox_conex disabled=no new-connection-mark=winbox_down \
    passthrough=yes
add action=mark-packet chain=postrouting connection-mark=winbox_down disabled=\
    no new-packet-mark=winbox_down_pkt passthrough=no
add action=mark-connection chain=prerouting comment=TeamViewer disabled=no \
    dst-port=5938 in-interface=!ether1_wan new-connection-mark=TeamViewer_conex \
    passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=TeamViewer_conex \
    disabled=no new-packet-mark=teamviewer passthrough=no
add action=mark-connection chain=prerouting comment="Otras UDP connection" \
    disabled=no in-interface=!ether1_wan new-connection-mark=otras_udp_cnx \
    passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=otras_udp_cnx disabled=\
    no new-packet-mark=otras_udp_pkt passthrough=no
add action=mark-connection chain=prerouting comment="Otras connection" \
    connection-bytes=0-500000 disabled=no in-interface=!ether1_wan \
    new-connection-mark=otras_cnx passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=otras_cnx disabled=no \
    new-packet-mark=otras_pkt passthrough=no

/ip firewall nat
add action=masquerade chain=srcnat disabled=no src-address=192.168.5.0/24
add action=dst-nat chain=dstnat comment="Redirect Thunder 3.1.x" disabled=yes \
    dst-port=80 protocol=tcp src-address=!192.168.10.2 to-addresses=\
    192.168.10.2 to-ports=3128

/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no

a ver que desperfecto le miras

[roxdng]

tienes varias reglas que no tienen mucho sentido.

pero en lo que respecta al thunder

en NAT debería ir asi

/ip firewall nat
add action=dst-nat chain=dstnat comment="Redirect Thunder 3.1.x" disabled=yes \
    dst-port=80 protocol=tcp src-address=!192.168.10.2 to-addresses=\
    192.168.10.2 to-ports=3128
add action=masquerade chain=srcnat disabled=no src-address=192.168.5.0/24

primero redireccionas luego enmascaras en tu rango de usuarios 192.168.5.0/24

[isaacr_22]

Gracias amigo por la ayuda

Ya hice exactamente lo que me dijiste puese arriba el enmacarado y abajo el redireccionamiento y pegue la regla del nat asi como me la pusiste pero sigue sin funcionar, me sale el mismo error: Incapaz de determinar la dirección IP a partir del nombre de la máquina y me sigue dejando sin internet al habilitar la regla de NAT.

Tal vez no podrá ser cosa de mi proveedor que es TELMEX yo tengo el internet a través de DHCP cliente la dirección ip del la ether1_wan me la asigno automático por DHCP el modem THOMSON. ¿que crees?

saludos 

[luistec]

Cambia el enmascarado, haslo por interface.

Saludos.

[isaacr_22]

Amigo no se exactamente a que te refieres, pero menimagino que es asi:
add action=masquerade chain=srcnat disabled=no src-address=ether1_wan ???

Que medices

[Nessa]

El mensaje de error que tienes se debe al dns, no puede resolver el nombre de la pagina. Revisa que tu MK tenga configurado los dns.

[ingjaab]

Amigo no se exactamente a que te refieres, pero menimagino que es asi:
add action=masquerade chain=srcnat disabled=no src-address=ether1_wan ???

Que medices

en nat y mangle por interface para salga saludos

[luistec]

Para despistar te has fijado si el servidor tiene internet, esto para ver si la falla es por la configuracion del servidor o del mikrotik.

Saludos.

[isaacr_22]

Wow wow

Por fin ya me esta funcionando.

Muchas gracias en especial a LUISTEC, lo conseguí haciendo el enmasacarado en Out. Interface: al wan y desactivando en Src. Address.

Saludos