NAT problems

Flags: X - disabled, I - invalid, D - dynamic 
 0   chain=srcnat action=masquerade src-address=10.0.0.0/8 

 1 X chain=dstnat action=dst-nat to-addresses=10.10.1.85 to-ports=3389 protocol=tcp

when i enable 1 the port forwarding works fine and i can access the machine (10.10.1.85) from anywhere outside using the internet… but the machine stops responding to all internet request on itself when i try to open website in browser.

why is this happening??

You are telling your rounter to change every packet destionation.
Edit your NAT rule and specify protocol and port in the first tab.

A good way to do it is to specity in-interface, protocol and port in general tab.
If you are using it only from internet to access your LAN.

example code:

/ip firewall nat
add action=dst-nat chain=dstnat comment="PORTAS UDP ARMA 3" dst-port=\
    2302,2303,2305,8766,27016 in-interface=pppoe-INTERNET-GVT protocol=udp \
    to-addresses=192.168.2.66

hello binarycash,

thank you for your suggestion… may god bless you!!! :slight_smile: