Forward all the port

RouterOS General
1

Hi all,

Here is my schma :

  • Mikrotik (pppoe client for WAN connection) ) : eth2 = 192.168.254.1
  • Firewall : 192.168.254.5

All the ports have been forwarded to the firewall. The problem is that i cannot ping my mikrotik anymore from outside.

Do you have any idea?

Thank you in advance,

Bests Regards,

2

Your layout isn’t exactly clear. Where is the PPPoE server in relation to these items? PPPoE is PPP…over Ethernet. There needs to be a layer 2 path to the PPPoE server.

3

My setup :

1 xDSL modem ==>eth1 Mikrotik (pppoe client) ==> firewall.

The only probem is that my mikrotik is not pingeable from outside.

In the previous configuration, there were no firewall. It has been added today. So, the customer asked me to forward all the ports to his firewall.

All is working well exept the ping from outside.

4

I suggest that you upload the IP Firewall settings - output from /export compact.

5 
/ip firewall filter
add chain=input comment="Allow ICMP" protocol=icmp src-address-list=CybNet
add chain=forward comment="Forward to their firewall" dst-address=\
    192.168.254.5 dst-address-list=""
add chain=input comment="Winbox Access" dst-port=8291 protocol=tcp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=\
    pppoe-cybernet
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=\
    invalid
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=8291 in-interface=pppoe-cybernet \
    protocol=tcp to-addresses=192.168.254.1 to-ports=8291
add action=dst-nat chain=dstnat dst-address=xxx.xxx.xxx.xxx to-addresses=\
    192.168.254.5
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=pppoe-cybernet to-addresses=0.0.0.0

Thank you in advance,