Need help with port openings

Hello
I am new to MikroTik, and I have CCR 3036 and need to open those ports to make my server work with outside world. I have tried everything I could find online and on forum here but with no luck to make it work… I hope someone here will help me and tell me how to do it, step by step…

Ports:
20 - FTP
21 - FTP
22 - SSH
25 - SMTP/EMAIL
26 - SMTP
53 - BIND/DNS
80 - HTTP / Apache Web server
110 - POP3/EMAIL
143 - IMAP
443 - HTTPS / Apache Web server SSL
465 - SMTP/EMAIL SSL/TLS
993 - IMAP/EMAIL SSL
995 - POP3/EMAIL SSL
2030 - CWP Admin
2031 - CWP Admin SSL
2082 - CWP User Panel
2083 - CWP User Panel SSL
2086 - CWP Admin (same as 2030)
2087 - CWP Admin SSL (same as 2031)
2304 - CWP External API SSL (https, only for api access like whmcs )

Thank you :blush:

Is this a business or a home setup?

Hello
It’s bought, business and home setup…

Still in doubt whether I should help you or not (and especially if you are helped by getting the ports in place). By the choice of ports I’m not convinced of sufficient knowledge about security (let alone that port 20 FTP should be set outbound instead of inbound). Besides, there are tons of tutorials and similar topics to be found here.

I hope someone here will help me and tell me how to do it, step by step…

What have you tried? What are you running into? How does your current configuration look like (/export hide-sensitive file=anynameyoulike)?

Right now I have made factory reset, after I wrote her, to start all fresh setup…

To talk from the inside world to the outside world you don’t need to do nothing special with default rules.

To let strangers talk to your internal host read this
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Destination_NAT

To let to talk to your internal hosts via external addresses from local lan (to mimic beeing “outside”) read this
https://wiki.mikrotik.com/wiki/Hairpin_NAT