CCR1036 not correctly working with dst-nat

RouterOS General
1

Hi all
My CCR1036 is not correctly working with dst-nat
i have the only rule:

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=X.X.X.X dst-port=15999 protocol=tcp to-addresses=
192.168.7.5 to-ports=3389


BUT then i test it from linux, the port is filtered:

[root@mon ~]# nmap -sS X.X.X.X
15999/tcp filtered unknown


why it heppen? other my router works with this rule right and the port is open!

2

Try this…

/ip firewall filter
add chain=forward dst-address=192.168.7.5 dst-port=3389 protocol=tcp place-before=0

3

unfortunately it did not help, the port was filtered again