MikroTik RouterOS • View topic

benmikrotik · **Posted:** Tue Jul 27, 2010 7:35 am

Hi,

How do I port forward to be able to access my DVR from outside the network. I could access it through LAN but not outside.

port tcp 34567
udp 34568
http 80

DVR IP 192.168.1.100
ISP's IP assigned to my WAN is 124.XXX.XXX.XXX

blake · **Posted:** Tue Jul 27, 2010 7:55 am

http://wiki.mikrotik.com/wiki/Manual:IP ... rt_mapping

Code:

/ip firewall nat
add chain=dstnat action=dst-nat protocol=tcp dst-address=124.XXX.XXX.XXX dst-port=80 to-addresses=192.168.1.100 to-ports=80
add chain=dstnat action=dst-nat protocol=tcp dst-address=124.XXX.XXX.XXX dst-port=34567 to-addresses=192.168.1.100 to-ports=34567
add chain=dstnat action=dst-nat protocol=udp dst-address=124.XXX.XXX.XXX dst-port=34568 to-addresses=192.168.1.100 to-ports=34568

You may need to add the following depending on your forward policy.

Code:

/ip firewall filter
add chain=forward action=accept protocol=tcp dst-address=192.168.1.100 dst-port=80,34567
add chain=forward action=accept protocol=udp dst-address=192.168.1.100 dst-port=34568

benmikrotik · **Posted:** Tue Jul 27, 2010 5:36 pm

Thanks a lot blake, I have gotten it to work.

How important is the second code?

It's working without it.

blake · **Posted:** Tue Jul 27, 2010 9:51 pm

If you have a deny (see below) at the end of your forward chain then you would need the second set of rules placed somewhere above that deny.

Code:

/ip firewall filter add chain=forward action=drop

benmikrotik · **Posted:** Wed Jul 28, 2010 10:06 am

Thanks again.

Who is online