How to portforward for Minecraft server

RouterOS Beginner Basics
1

Hi! I have been trying to portforward for my minecraft server but, I can’t get it to work. I am a noob when it comes to these things so I need help. I have tried multiple solutions with the GUI or the terminal solutions, but they don’t seem to work. Here are some of the commands I tried.

ip firewall filter add chain=forward dst-address=192.168.88.142 protocol=tcp dst-port=25565 action=accept




/ip firewall nat add chain=dstnat protocol=tcp dst-port=25565 in-interface=wlan1 action=dst-nat to-address=192.168.88.142 to-ports=25565




/ip firewall nat
	add chain=dstnat action=dst-nat dst-port=25565 protocol=tcp in-interface=wlan1 \
	to-address=192.168.88.142 to-ports=25565

I can’t get it to work. It works localy, but thats it.
I have tried to disable the Firewall itself, but my router doesn’t allow it.

/ip firewall filter disable [/ip firewall filter find]

I get an error: failiure: cannot change builtin

Need help. I am open to any solution.

2

Yes,

  1. Only one firewall rule is needed for port forwarding (whether you have one server or 20 - assuming NAT of course)

  2. You need one dstnat rule per server.

  3. If you still have the default firewall rule in place… it will work just fine.
    add action=drop chain=forward comment=
    “defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
    connection-state=new in-interface-list=WAN

    \

  4. For the destination nat rule… I am confused by wlan1 but will assume you have your INTERNET coming on on WLAN1? In any case Try
    add chain=dstnat action=dst-nat protocol=tcp dst-port=25565 in-interface=WAN to-address=192.168.88.142

dont need to-ports if no change from dst-port.

3

I know this is a bit of a hijack, but i’m trying to do the exact same thing here… My port forwarding attempts don’t seem to be working either.

I’ve tried in the past, have had a complete redo of my network layout, and I still can’t seem to get it working.

@anav, i’m willing to take the time to learn this one and debug it completely.. The kids and their minecraft is not as important as it was to get their school work up and going!

I’ve done this exact same thing, trying to get to my server (192.168.15.10) same port. Nada. :frowning:

I’m using the Mikrotik cloud service. When I go to the address, I end up seeing my router homepage (login page). But I can’t seem to get 25565 to work.

4

No worries, post your config for me to look at.

5

Hi! I am experiencing exact the same problem, I’ve done everything and still canyouseeme.org can’t see my 25565 port.
I’ve done

/ip firewall nat add chain=dstnat protocol=tcp dst-port=25565 in-interface=sfp1 action=dst-nat to-address=192.168.88.100 to-ports=25565

and

/ip firewall filter add chain=forward dst-address=192.168.88.100 protocol=tcp dst-port=25575 action=accept

I also placed them on top of other rules, opened the 25565 port on my server and called my ISP support to see whether they blocked any ports, they didnt. Still nothing. Any ideas on what else I could do?

6

Sorry, I forgot to subscribe to this thread and was just waiting to see it hit my inbox… fail!

Here’s my config..
25Nov20RB4011.rsc (11 KB)

7

Hmmm,
Only thing in firewall rules to clarify is that your IOT devices are not included in list internet and thus cannot access the internet.
All my IOT devices need to talk to the internet cloud of some sort???

The firewall rule for port forwarding is the default one so it looks okay but needs to be refined!
The second last rules in the forward chain could be cleaned up as its slightly redundant due to the more encompassing last rule> The idea here is to state what traffic you are allowing…
From
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface-list=WAN
add action=drop chain=forward comment=“drop all else”
TO
add action=accept chain=forward comment=“allow port forwarding”
connection-nat-state=dstnat connection-state=new in-interface-list=WAN
add action=drop chain=forward comment=“drop all else”

As far as port forwarding…
add action=dst-nat chain=dstnat comment=“Minecraft Server” dst-port=25565
in-interface=PPPoE_WAN protocol=tcp to-addresses=192.168.15.10

Hmmm try
in-interface-list=WAN to see if that help?

8

Just to confirm,

You are trying to reach the servers via the WANIP??
WHY… just use the lanip of the server??

If the server is in the same LANIP of the user and trying to reach it via WANIP of the router then that is called hairpin NAT>
The easiest solution is to move the server to another vlan by itself and that will solve that for example or you need to make more rules in IP NAT.

Alternatively you can get a friend to see if they can get at the server from their WANIP, as hairpin nat or often called loopback is a local phenomena.
What functionality do you want to have??

9

I’m trying to port forward this so that I can connect to it from outside my network.

I am using the lanIP for the devices inside the network, that works just fine. I want to be able to invite others to it is the issue.

10

And, now that I changed that second to last rule, it seems to be working.

Thank you very much @anav! Have a good one.

11

Hi!
Im super new to this and i dont fully quite understand how to setup a minecraft server, but i would like to. Im trying to setup my router so i can play with my friends

Im not sure what i am doing wrong but this is what i have done

/ip firewall nat add chain=dstnat protocol=tcp dst.port=25565 in.interface=ether1 action=dst-nat to-address=192.168.88.35 to-ports=25565

/ip firewall filter add chain=forward dst-address=192.168.88.35 protocol=tcp dst.port=25565 in.interface=ether1 action=allow

i was following what you said in this thread @anav and im not sure what im doing wrong