Provider forwarded IP to wireless radio (Mikrotik) device on roof (IP internal 192.168.100.197) and then to my router HAP ac2 (192.168.88.1).
I forwarded external IP to my computer (192.168.88.100)
There is no problem when I stream games over public IP with Nvidia GameStream. I can connect and play games on device outside my network.
I can’t connect to my HLDS server from computer outside network.
Open Protocol Test site say that port 27015 is closed, but when I set this port in app like qbitorrent then port is open.
What am I doing wrong?
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none
1 ;;; WANtoLAN
chain=dstnat action=dst-nat to-addresses=192.168.88.100 dst-address=XXX.XXX.XXX.XXX log=no log-prefix=""
2 ;;; LANtoWAN
chain=srcnat action=src-nat to-addresses=XXX.XXX.XXX.XXX src-address=192.168.88.100 log=no log-prefix=""
3 ;;; Transmission
chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=51413 protocol=tcp dst-port=51413 log=no log-prefix=""
4 ;;; Transmission
chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=51413 protocol=udp src-port="" dst-port=51413 log=no
log-prefix=""
5 ;;; HLDS:27015
chain=dstnat action=dst-nat to-addresses=192.168.88.100 to-ports=27015 protocol=udp dst-port=27015 log=no log-prefix=""
6 ;;; HLDS:27015
chain=dstnat action=dst-nat to-addresses=192.168.88.100 to-ports=27015 protocol=tcp dst-port=27015 log=no log-prefix=""
7 D ;;; upnp 192.168.88.100: Moonlight - DESKTOP-J9LQUO9
chain=dstnat action=dst-nat to-addresses=192.168.88.100 to-ports=47984 protocol=tcp dst-address=192.168.100.197
in-interface=ether1 dst-port=47984
8 D ;;; upnp 192.168.88.100: Moonlight - DESKTOP-J9LQUO9
chain=dstnat action=dst-nat to-addresses=192.168.88.100 to-ports=47989 protocol=tcp dst-address=192.168.100.197
in-interface=ether1 dst-port=47989
9 D ;;; upnp 192.168.88.100: Moonlight - DESKTOP-J9LQUO9
chain=dstnat action=dst-nat to-addresses=192.168.88.100 to-ports=48010 protocol=tcp dst-address=192.168.100.197
in-interface=ether1 dst-port=48010
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
2 ;;; defconf: drop invalid
chain=input action=drop connection-state=invalid log=no log-prefix=""
3 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp
4 ;;; defconf: accept to local loopback (for CAPsMAN)
chain=input action=accept dst-address=127.0.0.1
5 X ;;; defconf: drop all not coming from LAN
chain=input action=drop in-interface-list=!LAN log=no log-prefix=""
6 ;;; defconf: accept in ipsec policy
chain=forward action=accept ipsec-policy=in,ipsec
7 ;;; defconf: accept out ipsec policy
chain=forward action=accept ipsec-policy=out,ipsec
8 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related
9 ;;; defconf: accept established,related, untracked
chain=forward action=accept connection-state=established,related,untracked
10 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid log=no log-prefix=""
11 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN log=no log-prefix=""
12 ;;; OpenVPN port
chain=input action=accept protocol=tcp dst-port=1194 log=no log-prefix=""
Please post complete config…
Not sure why people think that a poor explanation and no diagram can be solved by snippets of the config.
Maybe I am just picky…
There you’ve to open the ports and link them to your PC’s IP address, which should be a static one to avoid that your PC get another ip on the next restart UPSers.
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface-list=WAN (if you only have one wan could be out-interface=WAN)
The rest of your rules are weird!!
Why do you have another source nat rule??
The format for dsn nat rules are incorrect
The basic format for dst nat rules is add chain=dstnat action=dst-nat in-interface-list=WAN protocol=?? dst-port=xxx to-addresses= SERVER_IP to-ports=(only needed if different from dest port ie doing port translation).
(1) But still can’t connect to my server outside network
Hmm are you trying to connect to your server but from within LAN via the WANIP?
Are you trying to connect to a server on the internet from the lan??
Are you trying to connect to a server from the lan using the LANIP of the server??
See how a vaguely worded statement begs more questions.
(2) /ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface=ether1
Try using WAN vice ether1.
(3)add action=dst-nat chain=dstnat comment=Transmission dst-port=51413
in-interface-list=WAN protocol=udp src-port=“” to-addresses=192.168.88.10
What are you doing there? Get rid of source port!
I have Dedicated Server (attachment) set to internet on my PC (I want to share that server wth my public IP, PC have local IP 192.168.88.100), on my notebook I’m connected to mobile internet (different network, different provider). In Counter-Strike after “connect public_ip” server not responding.
ether 1 is my WAN (input does not match any value of interface when set WAN instead of ether1)
miss click in WinBox
I tried port TCP 27015 in TightVNC and it also works perfect, I can connect to my PC without problem from my mobile phone (not connected to local WLAN).
Maybe HLDS needs some additional configuration.
I have Dedicated Server (attachment) set to internet on my PC (I want to share that server wth my public IP, PC have local IP 192.168.88.100), on my notebook I’m connected to mobile internet (different network, different provider). In Counter-Strike after “connect public_ip” server not responding.
ether 1 is my WAN (input does not match any value of interface when set WAN instead of ether1)
miss click in WinBox
If you can create a diagram to explain what you are saying in (1), I may be able to help
I have never heard dedicated server on my PC set to internet ? what does set to internet mean?
It sounds like
I have a server on my PC, that I want others to be able to connect to over the internet??
I have a separate PC, a notebook where you connect to mobile internet??
SO I am confused, do you have a router, what is the router connected to?
Are you trying to connect to your PC server via the router by using the notebook connecting to a different provider?
