cant connect to router from work

i have this in my /ip – firewall – nat

 3   ;;; allow access from outside
     chain=dstnat dst-address=84.254.1xx.xx action=dst-nat 
     to-addresses=192.168.0.1 to-ports=0-65535

(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.

i can ping my router from work and thats about it.


This’s my simple answer…
Yes, offcourse your public IP:84.254.1xx.xx already translate to other machine at IP:192.168.0.1 and all port, ‘winbox port’ is 8291, when like that condition possible make disappear ‘Mikrotik Login Webpage Interface’, or redirect to other one or webserver, etc…you can put translate for dst-address and dst-port to local one and to-ports=0-65535 than you can dissappear ‘Mikrotik Login Webpage Interface’ and do connect with WINBOX.

OR

my simple solution disabled that firewall just temporary, and reenabled back when finish, regards,
BalimoreDOTcom
---------------

i am having a bit of trouble understand you. what firewall shall i disable?

no 3 firewall i mean

i dont have a firewall to disable and at work i cant disable anything


Hai, Cylent

Why you tell not have firewall, but you wrote and posted on above at '/ip fi nat' and NAT code is number 3, that's correct yours?

on that code possible i mean

peace all
BalimoreDOTcom

i am afraid your english is not getting through to me and i am not understanding what you’re saying.

anybody want to translate or help?


Ok, cylent
so, i am so sorry in bad my an english.

i mean that NAT is correct, when you will connect to your router from outsite with that Public IP[84.254.1x.xxx] and disallow with WINBOX, cause that Public IP[destination] is already translate to 192.168.0.1 all ports included.

again so sorry

peace all


Ok, cylent
so, i am so sorry in bad my an english.

i mean that NAT is correct, when you will connect to your router from outsite with that Public IP[84.254.1x.xxx] and disallow with WINBOX, cause that Public IP[destination] is already translate to 192.168.0.1 all ports included.

again so sorry

peace all

i don’t why twice sending

balimore…

can I contact u? I need some help with my MT configuration :frowning:

I just open ur site (maybe :slight_smile: ) and ur mobile …xxxx64 7174.

Is that right?

Thanks

You can try this NAT rules :slight_smile:

/ip firewall nat add chain=dstnat protocol=tcp dst-address=84.254.1xx.xx/32 dst-port=8291 \
action=dst-nat to-addresses=192.168.0.1 to-ports=8291

/ip firewall nat add chain=srcnat protocol=tcp src-address=192.168.0.1/32 action=src-nat \
 to-addresses=84.254.1xx.xx