NAT Masquerading / firewall filter rules question.

RouterOS General
1

Dear all,

I am in front of a new for me problem on my new Routerboard 411.
I have set it with NAT / masquared and I need to give access from out site to my FTP server that exist in the inside.
What filter rule I must give give them access to my FTP server?

Thank you in advance for your help.
Costas.

2

you must make a new NAT rule with the action dst-nat. you will have to specify the port (the FTP port) and the to-address (where the connection will be sent)

3

Thank Normis,

1st. I’ve done that but I blocked everything coming in or out.
2nd. Is there a site for related examples in the web, except mikrotik site?

Thank

4

this is what you need:
http://wiki.mikrotik.com/wiki/Forwarding_a_port_to_an_internal_IP

5

thank you

and if i change the 69.69.69.69 to 0.0.0.0 will have access any client from the outside?

6

/ip firewall nat add chain=dstnat dst-address=69.69.69.69 protocol=tcp dst-port=5900
action=dst-nat to-addresses=192.168.1.101 to-ports=5900

nope:

dst-address = address of router’s public inteface
dst-port - connections going to this port will be affected by the rule
to-addresses - where you will redirect to
to-port - port on the above address where you will redirect to

7

Thank you normis,

I will try it.

Costas.