See my reply here:
http://forum.mikrotik.com/t/remote-access/150805/2
/ip firewall filter
add action=accept chain=input comment="Remote access to Mikrotik Igor" dst-port=8291 protocol=tcp
As a first rule, you do open internet to access port 8291…
/ip upnp
set enabled=yes
Should I turn on UPnP on router?
A Trojan horse or virus on a computer inside your network could use UPnP to open a hole in your router’s firewall to let outsiders in. So it’s a good idea to turn off UPnP when not in use. …
I do use UPnP, but I do monitor it, so I have ok control of every host that uses it,why and when. (using Splunk)