What is the difference between source NAT (masquerade) and destination NAT in MikroTik?

What is the difference between source NAT (masquerade) and destination NAT in MikroTik?

• A. Source NAT rewrites the source address of outbound packets to the router's IP; Destination NAT rewrites the destination IP/port of incoming packets to a specific internal host.
• B. Source NAT rewrites the destination address of outbound packets; Destination NAT rewrites the source IP/port of incoming packets
• C. NAT rewrites port numbers only
• D. NAT is only for inbound traffic

Answer: (A)

Source NAT, including masquerade, changes the source address of packets as they leave your network, replacing it with the router’s external IP. This lets many internal hosts share a single public IP and keeps return traffic coming back to the router, which then forwards it to the right internal host. Destination NAT changes the destination address (and often the port) of packets coming from outside so they are redirected to a specific internal host, enabling things like port forwarding. For example, outbound traffic from an internal PC appears as if it came from the router’s public IP; inbound traffic to the public IP on a given port is rewritten to the chosen internal device. The idea that NAT only rewrites ports is incorrect, and NAT is used for both inbound and outbound traffic.

Source NAT, including masquerade, changes the source address of packets as they leave your network, replacing it with the router’s external IP. This lets many internal hosts share a single public IP and keeps return traffic coming back to the router, which then forwards it to the right internal host. Destination NAT changes the destination address (and often the port) of packets coming from outside so they are redirected to a specific internal host, enabling things like port forwarding. For example, outbound traffic from an internal PC appears as if it came from the router’s public IP; inbound traffic to the public IP on a given port is rewritten to the chosen internal device. The idea that NAT only rewrites ports is incorrect, and NAT is used for both inbound and outbound traffic.