Access from Internet to LAN PC (Fedora) Making a mess, help!

RouterOS Beginner Basics
1

I have an RB153 (3.30 ROS, having issue getting to 4.16) > Connected to Bridged DSL Modem >
Ether1) WAN PPOE (Public IP - Dynamic > connected to the DSL modem)
Ether2) IP pool 10.10.10.1/24 > DHCP Server .100-199
Ehter3) IP pool 10.10.11.1/24 > DHCP Server .100-199
Ether4) IP Pool 10.10.12.1/24 > DHCP Server .100-199
Ether5) IP Pool 10.10.13.1/24 > DHCP Server .100-199 (PC with Fedora 14, LAN 10.10.13.99 > Need to allow Remote Access to PC from Internet)
WLAN1) IP Pool 10.10.15.1/24 > Hotspot

I just need to allow access to the linux PC for some software installation. (wish I knew more about linux as GoToMyPC or realvnc would be real handy right now)
Having trouble setting it up properly without FUBARing it completely. I do better with Winbox than I do Terminal Command line.
Here is what I was starting with: (not sure how to make this work with a dynamic assigned IP)

/ip address add address=*WAN DSL IP (DHCP)* interface=Ehter1
/ip firewall nat add chain=dstnat dst-address=*WAN DSL IP (DHCP)* action=dst-nat \to-addresses=10.10.13.99
/ip firewall nat add chain=srcnat src-address=10.10.13.99 action=src-nat \to-addresses=*WAN DSL IP (DHCP-Server)*

I was thinking maybe a simple port mapping, but was unsure if that would allow for full access to the PC with Fedora. Considering I am not finding a Remote Access application that works on Linux reliably. The following seemed better suited to allowing access to a Web Server application running on the PC as opposed to full access.

/ip firewall nat add chain=dstnat dst-port=8080 action=dst-nat protocol=tcp to-address=10.10.13.99 to-port=80

In trying to do this I have broken or changed the Firewall function of blocking repeated ftp and admin access to the router. I am really needing a hand to fix this, as soon as, someone can help.
Thanks,

2

You actually don’t need the srcnat rule and that’s probably where your problem is coming from. According to your rule, instead of NATing connections coming from the Fedora server to the public IP of the router like it should be, you say you are NATing it to the DHCP-Servers IP?

3

Thanks for the advice. I will see what I can do. I haven’t even been able to figure out how to move the entries in the filter up or down the list. I am forgetting more than I am remembering. I had all these type of configs stored for reference but they seem to have been lost along the way. Haven’t needed them for over 3 years, as things have been working great. Using Mikrotik as my Home Router may be a bit of an overkill.

4

(snip) I haven’t even been able to figure out how to move the entries in the filter up or down the list. (snip)


/ip firewall filter
print
move X Y

Replace X with the current line number, and Y with the new line number.

5

Also with WinBox just drag and drop the rules to where you want them.

When first writing rules you can specify where to place them with place-before=x specified in the rule.

6

Thank you very much. I will try that…
I used comments that made sense at the time… that now after 3 years have me more confused than informed.

Appreciate the response Feklar, SurferTim