Basic NAT from outside not working

RouterOS Beginner Basics
1

HI!

I’m new to Mikrotik and I’ve been trying to do some NAT-ting from the outside in, but they do not seem to work. I don’t see anything that should block in the firewall and no route seems to be missing. But when I try to connect to my public IP, nothing seems to happen, and the counter for the rule doesn’t even increment.
I’m on version RouterOS v6.47.1 (stable) .

Any input is appreciated.

ip firewall nat print

 1    ;;; Radarr
      chain=dstnat action=dst-nat to-addresses=192.168.88.235 to-ports=7878 protocol=tcp in-interface=lte1 
      dst-port=7878 log=no log-prefix=""

ip firewall filter print

 0    chain=input action=accept protocol=icmp 

 1    chain=input action=accept connection-state=established 

 2    chain=input action=accept connection-state=related 

 3    chain=input action=drop in-interface-list=!LAN

ip route print

 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          lte1                      2
 1 ADC  10.2.224.54/32     10.2.224.54     lte1                      0
 2 X S  10.70.67.14/32     178.197.235.209 lte1                      1
 3 ADC  192.168.88.0/24    192.168.88.1    bridge                    0
 4 X S  192.168.88.0/24    10.70.67.14     lte1                      1
2

Add dst-address to the NAT rule (pulic address)

3

Thank you for your answer.
Unfortunately, it doesn’t seem to help…

4

It seems your connection is processed by some CGNAT (Carrier Grade NAT) from the operator/provider.
If so, you will never be able to have any inbound mappings like you try.
You need a PUBLIC address on any of your interfaces, but I don’t see that.

10.2.x.x IP’s on your LTE-interface are not public IP’s.

Visit a website like whatismy.com and check if you find that IP on any of your Mikrotik interfaces.

5

So that’s why I get a private IP on the LTE interface. Thank you. Sadly I can’t just call my ISP, as I’m using a company SIM card. I’ll just check with them on Monday.

6

Well it appears my carrier does not do direct public IP anymore… No natting for me, I guess!