Community discussions

MikroTik App
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

opening ports, cant get it working

Mon Nov 14, 2011 11:16 pm

Hi all.

so i have had a new router-board sxt installed. Wan - pppoe -internal LAN. I'm using a linksys router as a switch for the moment. This is working fine now. the router board is handing out Ip's to the Xbox and my desktop.

So i need to open all the ports on the sxt as this connection is for my Xbox only. I have tried adding the dst chain for tcp and udp 0-65000 (from the wiki) but it wont work (well I'm not doing it right) but I think because there is a Nat rule already in place using ip masquerading on pppoe, scrNat.

What am i doing wrong?????

Bob
 
cieplik206
Trainer
Trainer
Posts: 290
Joined: Sun Jul 01, 2007 12:25 am
Contact:

Re: opening ports, cant get it working

Mon Nov 14, 2011 11:19 pm

Hi

in terminal do a:
/ip firewall nat export
and place output here
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Mon Nov 14, 2011 11:21 pm

add action=masquerade chain=srcnat disabled=no out-interface=pppoe-out1

There ya go
 
cieplik206
Trainer
Trainer
Posts: 290
Joined: Sun Jul 01, 2007 12:25 am
Contact:

Re: opening ports, cant get it working

Mon Nov 14, 2011 11:55 pm

and where are DST-NAT rules ?
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Mon Nov 14, 2011 11:59 pm

I removed them as I could not get them to work. I am looking for the correct way to do.it
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Tue Nov 15, 2011 12:28 am

/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-out1

add action=add-dst-to-address-list address-list=192.169.100.96 \
address-list-timeout=0s chain=dstnat disabled=no dst-address=149.5.xx.x\
dst-port=0-65000 in-interface=wlan1 port=0-65000 protocol=tcp

add action=add-dst-to-address-list address-list=192.168.100.96 \
address-list-timeout=0s chain=dstnat disabled=no dst-address=149.5.xx.x \
dst-port=0-65000 in-interface=wlan1 port=0-65000 protocol=udp


This is what I am trying to use,
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Tue Nov 15, 2011 10:37 am

Anyone?
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Tue Nov 15, 2011 12:05 pm

I think what you need to nat your public IP to your Xbox or some specific ports.
try to search in XBOX LAN game guide to find requirement, then you can do the configurations in Mikrotik.
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Tue Nov 15, 2011 1:44 pm

Yeah, i know the ports, but the connection is for the Xbox only so its just as easy to open up all the ports.

I am not sure of exactly what to nat to what, hence I'm asking here :)
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Tue Nov 15, 2011 1:52 pm

I don't know anything about XBOX cause I don't have it, but check what kind of network configuration does it have(IP address, Subnet mask, Default Gateway ,...). Then tell us about them. may give solution. :)
By default all ports in Mikrotik are open, I think.
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Tue Nov 15, 2011 2:16 pm

The Xbox just gets a Ip from the router (SXT) including sub-net and gateway. Its a direct connection from the SXT router to the Xbox, nothing in between.

ports are
Port 88 (UDP)
Port 3074 (UDP and TCP)
Port 53 (UDP and TCP)
Port 80 (TCP)
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Tue Nov 15, 2011 5:57 pm

Maybe it is the solution
ip firewall nat add chain=dstnat dst-address=x.x.x.x action=dst-nat to-addresses=y.y.y.y
x.x.x.x= Public IP of router
y.y.y.y=XBOX IP address

It will nat all incoming packets to XBOX IP address
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Wed Nov 16, 2011 9:07 am

Ok i'll give it a go. Thanks
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Wed Nov 16, 2011 7:03 pm

You can also try UPnP in Mikrotik too

http://wiki.mikrotik.com/wiki/Manual:IP/UPnP
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Fri Nov 18, 2011 11:02 am

Ok, i will try that as well,

just one last thing. In all the examples on the wiki. They have Ether1 and wlan. I have 3 interfaces, Wlan ether1 and PPPoe.

I assume i just replace wlan with PPPOE, as that seems to be my OUTSIDE interface.

Thanks again,


Bob
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Fri Nov 18, 2011 11:50 am

I assume i just replace wlan with PPPOE, as that seems to be my OUTSIDE interface.
correct.
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Fri Nov 18, 2011 12:25 pm

That makes sense now.

The pppoe ip address is not however my externa/publicl ip, dose this matter?
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Fri Nov 18, 2011 12:34 pm

How do you get Public IP from yur ISP? Did your ISP assign you private IP and then NAT you and some other people to one Public IP ?
It is important whenever you use public IP as dst-address in NAT rule.
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Fri Nov 18, 2011 2:13 pm

I have a static ip from my ISP. no nat as far as i know
 
bob12
just joined
Topic Author
Posts: 17
Joined: Sat Nov 12, 2011 5:24 pm

Re: opening ports, cant get it working

Fri Nov 18, 2011 4:36 pm

# ADDRESS NETWORK INTERFACE
0 192.168.100.254/24 192.168.100.0 ether1
1 X 149.5.xx.x/32 149.5.xx.x wlan1
2 D 192.168.201.110/32 192.168.200.254 pppoe-out1

here is the address table if this helps
 
User avatar
sadeghrafie
Long time Member
Long time Member
Posts: 514
Joined: Sat Nov 14, 2009 11:28 am
Location: Bushehr, IRAN

Re: opening ports, cant get it working

Fri Nov 18, 2011 6:36 pm

If you try UPnP and no result achieved, You can try NAT. All of your rules must be like this but with different port.
chain=dstnat dst-address= 149.5.xx.x action=dst-nat to-addresses="XBOX IP address" to-ports= 
It's important that XBOX must has MT as it's DG too.

Who is online

Users browsing this forum: adrianh, Bing [Bot] and 126 guests