How to adapt a rule from the MikroTik firewall to the Linux iptables syntax?

Question

Mikrotik

There are such rules:

/ip firewall nat
add place-before=0 chain=srcnat src-address=192.168.0.0/24 dst-address=172.16.0.0/24

How to adapt it to Linux iptables?
And a related question: is there a way to get into a Linux shell ( sh or bash , whatever) on MikroTik-e? If there is such an opportunity, then just enter iptables -S and everything will become clear.

Answer 1

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -d 172.16.0.0/24 -j MASQUERADE

but it is preferable to SNAT a
strange idea to masquerade between gray networks
, especially if tunnels are built

Answer 2

well, write down
iptables -t nat -A -s 192.168.0.0/24 -d 172.16.0.0/24 -j SNAT
only you have some unfinished rule - action is missing. So I can't tell which address SNAT is running from

Answer 3

Alexander Karabanov : iptables writes to you correctly.
iptables v1.4.21: SNAT: option "--to-source" must be specified
Because
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -d 172.16.0.0/24 -j SNAT --to -source %ip address of the interface through which the connection goes up to 172.16.0.0/24%