I have removed the NAT rules. In my IP Service List I have: Winbox 8291 www 8080 In my Firewall/Filter rules I noticed I have: ( I assume this is what you mean by "Make sure you have input rules to allow those ports for winbox and www!") Allow winbox, accept, input, tcp, 8291 Allow web admin, accept...