firewall statistic

RouterOS Beginner Basics
1

Hello,

I have some port forwarding rules on my mikrotik router where the paket counter is always at 0.
Firewall.jpg
Here is my firewall/nat configuration.

fireall

/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=log chain=input comment=log in-interface=ether1-gateway \
    log-prefix=drop
add action=drop chain=input comment="default configuration" in-interface=\
    ether1-gateway
add chain=forward comment="default configuration" connection-state=\
    established
add chain=forward comment="default configuration" connection-state=related
add action=log chain=forward comment=log connection-state=invalid log-prefix=\
    drop
add action=drop chain=forward comment="default configuration" \
    connection-state=invalid
add chain=accept_list comment="Forward HTTP to webserver" dst-address=\
    192.168.1.100 dst-port=80 protocol=tcp
add chain=accept_list comment="Forward HTTP to webserver" dst-address=\
    192.168.1.13 dst-port=32400 protocol=tcp
add chain=accept_list comment="Forward HTTPS to webserver" dst-address=\
    192.168.1.100 dst-port=443 protocol=tcp
[admin@MikroTik] /ip>

The last 3 rules are the rules the thread is about :slight_smile:

nat

/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=ether1-gateway
add action=dst-nat chain=dstnat dst-port=80 in-interface=ether1-gateway \
    protocol=tcp to-addresses=192.168.1.100
add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1-gateway \
    protocol=tcp to-addresses=192.168.1.100
add action=dst-nat chain=dstnat dst-port=32400 in-interface=ether1-gateway \
    protocol=tcp to-addresses=192.168.1.13

Do I need to put the rules in the firewall filter or do I only have to put them in the dst-nat?

Thank you very much :slight_smile: