help forwarding protocols

RouterOS General
1

i blocked ports by firewall and enabled other : i want to play walfteam game i try to forward her ports 2300-2399 at upd but didn’t working

my config

/ip firewall filter

add action=jump chain=forward comment="TCP SERVICE " disabled=no jump-target=
TCP protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“Http ports” disabled=no dst-port=80
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“allow win box” disabled=no dst-port=8291
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“Conquer ports” disabled=no dst-port=
9528,9958,5816 protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“gmail send” disabled=no dst-port=587
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“teamviewer ports” disabled=no dst-port=
5938 protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“CHAT Services” disabled=no dst-port=
443,5000,5001,5050,5100,1408,1863,7070,12340 protocol=tcp src-address=
7.7.7.0/24

add action=drop chain=forward comment=“drop dns” disabled=no dst-port=53
protocol=tcp src-address=7.7.7.0/24

add action=drop chain=TCP comment=“Drop Other Ports” disabled=no protocol=tcp
src-address=7.7.7.0/24

add action=jump chain=forward comment=“UDP SERVICE” disabled=no jump-target=
UDP protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=“gmail send” disabled=no dst-port=587
protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment="> Wolfteam ports> " disabled=no dst-port=
2399,2300 protocol=UDP src-address=7.7.7.0/24

add action=accept chain=UDP comment="DNS " disabled=no dst-port=53 protocol=
udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=DHCP disabled=no dst-port=67-68 protocol=
udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=NTP disabled=no dst-port=123 protocol=udp
src-address=7.7.7.0/24

add action=accept chain=UDP comment=“MAC WINBOX” disabled=no dst-port=20561
protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=“Neighbour discovery” disabled=no
dst-port=5678 protocol=udp src-address=7.7.7.0/24

add action=drop chain=UDP comment=“Drop Other Ports” disabled=no protocol=udp
src-address=7.7.7.0/24

add action=jump chain=forward comment=“ICMP Service 3COM” disabled=no
jump-target=ICMP protocol=icmp src-address=7.7.7.0/24

add action=accept chain=ICMP comment=“"" 3com” disabled=no protocol=icmp
src-address=7.7.7.1

add action=drop chain=ICMP comment=“drop ping on network” disabled=no
protocol=icmp src-address=7.7.7.0/24

add action=log chain=forward comment=“Allow WhiteLists” disabled=no
log-prefix=“White Lists”

add action=accept chain=forward comment=“""” disabled=no

add action=drop chain=forward disabled=no src-address-list=HotSpotShieldUsers

add action=log chain=forward comment=“Block HotSpot Shield” disabled=no
log-prefix=HotSpotShield src-address-list=HotSpotShieldUsers

/ip firewall mangle

add action=add-dst-to-address-list address-list=WHITELIST
address-list-timeout=4w4d chain=prerouting comment=WHITELIST content=
!127.0.0.1:895 disabled=no dst-port=443 protocol=tcp
add action=add-dst-to-address-list address-list=WHITELIST
address-list-timeout=4w4d chain=prerouting comment=WHITELIST content=
!127.0.0.1:895 disabled=no dst-port=80 protocol=tcp
add action=add-dst-to-address-list address-list=HotSpotShieldUsers
address-list-timeout=1h chain=prerouting comment=HotSpotShieldUsers
content=127.0.0.1:895 disabled=no dst-port=80 protocol=tcp

my ip network : 7.7.7.1

when i disable firewall rules i can play game but without security by firewall

help plz

2

That’s all messed up.

To forward a port, simply do this for each port:

/ip firewall nat add chain=dstnat dst-address=69.69.69.69 protocol=tcp dst-port=5900 \
    action=dst-nat to-addresses=192.168.1.101

/ip firewall filter add chain=forward src-address=69.69.69.69/24 protocol=tcp dst-port=5900 action=accept
3

what mean : = 69.69.69.69
and : = 192.168.1.101

4

what mean : = 69.69.69.69
and : = 192.168.1.101

plz help

5

69.69.69.69 is WAN address
192.168.1.101 is local address of the device where you want to forward port.

6

it ok its open in router 3com but i make some configuration in firewall in mikrotik its block other ports

when i open any port by firewall its ok but this 2 ports (2300-2399) didn’t open by my method in my first topic


i cant’t play walfteam with active my firewall to protect my network


my config

/ip firewall filter

add action=jump chain=forward comment="TCP SERVICE " disabled=no jump-target=
TCP protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“Http ports” disabled=no dst-port=80
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“allow win box” disabled=no dst-port=8291
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“Conquer ports” disabled=no dst-port=
9528,9958,5816 protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“gmail send” disabled=no dst-port=587
protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“teamviewer ports” disabled=no dst-port=
5938 protocol=tcp src-address=7.7.7.0/24

add action=accept chain=TCP comment=“CHAT Services” disabled=no dst-port=
443,5000,5001,5050,5100,1408,1863,7070,12340 protocol=tcp src-address=
7.7.7.0/24

add action=drop chain=forward comment=“drop dns” disabled=no dst-port=53
protocol=tcp src-address=7.7.7.0/24

add action=drop chain=TCP comment=“Drop Other Ports” disabled=no protocol=tcp
src-address=7.7.7.0/24

add action=jump chain=forward comment=“UDP SERVICE” disabled=no jump-target=
UDP protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=“gmail send” disabled=no dst-port=587
protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=“Wolfteam ports” disabled=no dst-port=
2399,2300 protocol=UDP src-address=7.7.7.0/24

add action=accept chain=UDP comment="DNS " disabled=no dst-port=53 protocol=
udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=DHCP disabled=no dst-port=67-68 protocol=
udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=NTP disabled=no dst-port=123 protocol=udp
src-address=7.7.7.0/24

add action=accept chain=UDP comment=“MAC WINBOX” disabled=no dst-port=20561
protocol=udp src-address=7.7.7.0/24

add action=accept chain=UDP comment=“Neighbour discovery” disabled=no
dst-port=5678 protocol=udp src-address=7.7.7.0/24

add action=drop chain=UDP comment=“Drop Other Ports” disabled=no protocol=udp
src-address=7.7.7.0/24

add action=jump chain=forward comment=“ICMP Service 3COM” disabled=no
jump-target=ICMP protocol=icmp src-address=7.7.7.0/24

add action=accept chain=ICMP comment=“"" 3com” disabled=no protocol=icmp
src-address=7.7.7.1

add action=drop chain=ICMP comment=“drop ping on network” disabled=no
protocol=icmp src-address=7.7.7.0/24

add action=log chain=forward comment=“Allow WhiteLists” disabled=no
log-prefix=“White Lists”

add action=accept chain=forward comment=“""” disabled=no

add action=drop chain=forward disabled=no src-address-list=HotSpotShieldUsers

add action=log chain=forward comment=“Block HotSpot Shield” disabled=no
log-prefix=HotSpotShield src-address-list=HotSpotShieldUsers

/ip firewall mangle

add action=add-dst-to-address-list address-list=WHITELIST
address-list-timeout=4w4d chain=prerouting comment=WHITELIST content=
!127.0.0.1:895 disabled=no dst-port=443 protocol=tcp
add action=add-dst-to-address-list address-list=WHITELIST
address-list-timeout=4w4d chain=prerouting comment=WHITELIST content=
!127.0.0.1:895 disabled=no dst-port=80 protocol=tcp
add action=add-dst-to-address-list address-list=HotSpotShieldUsers
address-list-timeout=1h chain=prerouting comment=HotSpotShieldUsers
content=127.0.0.1:895 disabled=no dst-port=80 protocol=tcp