One problem that I have is that I can not view my local www server from my LAN (10.2.83.0/26). The server is in a local IP address (10.2.83.10) and the real IP address is 18.104.22.168. The problem is common and is called Hairpin NAT. Here is the solution that worked for me.
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=22.214.171.124 dst-address-type=local \
protocol=tcp src-address=10.2.83.0/26 to-addresses=10.2.83.10
add action=masquerade chain=srcnat dst-address=10.2.83.10 out-interface=ether1-master-local \