Where is the Action=redirect applied in MikroTik?

The Action=redirect is applied in the chain=dstnat. This is because the redirect action is specifically used for directing traffic to a different destination, typically when you want to intercept and forward traffic to a specific local address or port without requiring the client to change the address they are trying to reach.

In the context of MikroTik's firewall and NAT functions, dstnat (destination NAT) is the appropriate chain for modifying packets that are intended for a specific destination. When you enter a redirect rule in the dstnat chain, it matches incoming requests directed towards specified ports and naturally directs those requests to a different internal service or resource.

This is commonly used for scenarios such as redirecting web traffic to a local web server to ensure that users trying to access a service are transparently sent to a designated internal server instead. The other chains, like srcnat (source NAT), forward, and output, serve different purposes related to altering source addresses or controlling traffic flow rather than redirecting incoming connections to new destinations.