правило для NAT
chain=dstnat dst-addres=212.212.75.55 protocol=tcp dstport=999 action=dstnat to-address=192.168.1.151 to ports=80
при попытке зайти на порт .. пишет unreplied, типа не соединен, нужно ли ещё какиенить правила прописывать в других цепочках.
ЗЫ Для 192.168.1.151 прописан форвардинг наружу
Может кто знает,буду благодарен.
Mikrotik 2.9
Задача вывести 80 порт наружу.
Well, I can think that your post will probably have something to do with destination NAT. But if you would post in English, you probably would get more help 
Best regards,
Christian Meis
I have no idea what most of that says, but perhaps you need a src-nat rule with the src-ip=your_internal_server and action=masq for the returning traffic from your inside IP address.
It is required to me that it was visible web server outside 80 port
I have rules
NAT
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat out-interface=Craft src-address=192.168.1.0/24
dst-address =! 192.168.1.0/24 action=masquerade
2 chain=dstnat in-interface=Craft src-address=0.0.0.0/0
dst-address=22.22.22.58 protocol=tcp dst-port=999 action=dst-nat
to-addresses=192.168.1.250 to-ports=80
Filter
Flags: X - disabled, I - invalid, D - dynamic
3 chain=input action=accept
5 chain=forward in-interface=Local out-interface=Craft
src-address=192.168.1.0/24 dst-address =! 192.168.1.0/24 action=accept
6 chain=forward in-interface=Craft out-interface =! Craft
src-address =! 192.168.1.0/24 dst-address=192.168.1.0/24 action=accept
But in connections writes that a package syn sent and does not work!
What not so?
Russia.Novosibirsk
These rules work if to make nat on internal network interfaces of a server… And here in a local area network it is impossible
All has made.. Thanks for attention works perfectly