going Mad about nat

Two days spent understanding nat but failed:
I have routerboard 500 series, 2.9.8 software, no firewall rule, and a

chain=dstnat dst-address=xxx.xxx.xxx.xxx protocol=tcp dst-port=3389
action=dst-nat to-addresses=10.0.254.100 to-ports=0-65535
chain=srcnat src-address=10.0.254.0/24 action=src-nat
to-addresses=xxx.xxx.xxx.xxx to-ports=0-65535

Internal network nat works and redirection vs internal host on port 3389 also.
But any other mapping (ports 20-21, 25, 80) no. I’d have to copy the first chain to work but no result.
Please help me

for 3389 port redirection from public to local network use following rule:
‘/ip firewall nat add chain=dstnat dst-address=xxx.xxx.xxx.xxx protocol=tcp dst-port=3389
action=dst-nat to-addresses=10.0.254.100 to-ports=3389’