Hi all
I have Mikrotik server with public ip .
The problem I can’t login via winbox from external network only via webfig
And from lan I have no problem .
Best regard
No answer 
Check firewall settings.
You have opened http access which is bad: http://forum.mikrotik.com/t/cia-exploits-against-mikrotik-hardware/106871/1
but 8291 (Winbox) port is closed/firewalled.
No I did not close any port in firewall
…
And same problem
Do you accept new connections form WAN side ?
Yes
Default firewall config is to deny remote administration. Add an INPUT filter rule in IP > Firewall. Inbound connections on ether1-gateway on port 8291 should be accepted. Place this rule at the top of the list in the firewall rules.
For better security, consider using a VPN to administer your device remotely.