Open Ports on RouterOS 3.22

RouterOS Beginner Basics
1

Hi All,
Mikrotik RouterOS 3.22
Will be grateful if someone could assist me in setting up port forwarding / open port on mikrotik routeros so that it can forward packets to some servers on LAN interface.

I have tried alot of commands from the forum etc and it will allow me to rdp but then it disconnects and won’t never connect. RDP works fine and flawlessly from within the LAN.

We have 3 WAN (4 interfaces on Mikrotik RouterOS 3.22)

WAN1 : 192.168.1.1
WAN 2:192.168.3.1
WAN 3:192.168.4.1
LAN :192.168.2.1

WAN 1 is a dedicated link static public ip
WAN 2 and WAN 3 are both DSL with DSL modem / router in the front of mikrotik (Mikrotik is in DMZ on both dsl routers)

The rule is in place on mikrotik to forward / open 3389 for the given server and when I RDP from outside, it shows its receivng packets but it won’t connect.

I am confused as I read somewhere on these forums that it fails because it should know which interface to take the request back out.

What is MANGLE ?
What is Chain ?

I am confused with the above terms :slight_smile:

I have attached some files which I read over the forums are neccessary to have a good insight.
I have changed public IPs where possible to fake ones.

Will be grateful if someone could assist in setting up RDP and other PORTs or the proper method to open a port on RouterOS 3.22 via Winbox.

I am using Winbox to manage this.

Also, is it possible to loadbalance these 3 WAN connections or is it being done automatically ?

Kind Regards
firewall export.txt (1.64 KB)
interface print.txt (755 Bytes)
ip address print detail.txt (596 Bytes)

2

Try alos adding UDP version of this TCP rule.

Is 1.1.1.1 your “outside” address?

3

Hi kirshteins,

Same problem, I opened a question before for that, it has the diagram attached to it in the last post :
http://forum.mikrotik.com/t/mikrotik-3-wan-1-lan-open-ports/48551/1

Thanks for your reply, yes 1.1.1.1 is the outside interface IP Address from which I want to enter my network from outside

Actually, I have 3 WAN connected to this Mikrotik , I want to setup rules so that I can access my network via 1.1.1.1 interface /network as that is a static IP and a dedicated 2MB LINK.

Will be grateful for your assitance.

If I disable 2 WAN (DSL1 and DSL2) and leave the DEDICATED WAN On, I access my LAN server fine, as soon as i re-enable the other WAN interface I will get disconnected etc.

It seems that it is unable to mark the connection going outside (I guess)

Thanks