One problem that I have is that I can not view my local www server from my LAN ( The server is in a local IP address ( and the real IP address is The problem is common and is called Hairpin NAT. Here is the solution that worked for me.

/ip firewall nat

add action=dst-nat chain=dstnat dst-address= dst-address-type=local \

    protocol=tcp src-address= to-addresses=

add action=masquerade chain=srcnat dst-address= out-interface=ether1-master-local \