Firewall Config - Is this possible

RouterOS General
1

Please don’t scold me for being a newbie…

That being said, is the following possible?

Configure the firewall so that incoming packets on port 760 on one interface are forwarded to port 80 on another interface.

I have an internal web page on out LAN that I want people to access from their homes on the 'net. However, I would like to limit the exposure of this information by NOT having the web page active on port 80 on the public IP address. Therefore, I’d like an obscure port used publicly (http://x.x.x.x:760) to be forwarded internally to y.y.y.y:80.

Make sense?

Thank you in advance for any assistance given.

Take care!
Chris

2

/ip firewall nat add chain=dstnat action=dst-nat dst-address=x.x.x.x dst-port=760 to-addresses=y.y.y.y to-ports=80


Reading the manual also might help, esp. for newbies:
http://www.mikrotik.com/docs/ros/2.9/ip/nat

3

Point well taken. :blush:

Thank you very much! Much appreciated!