Opening a port, I don't get it?

RouterOS Beginner Basics
1

Hi,

So I looked around this forum and I have seen multiple config lines, but they don’t seem to work for me to open a port (remote desktop, 3389 in this case).

I am using a RB2011UAS-RM and I have my internet connection setup on eth6. I get a DHCP address from my provider on that interface, but I took the ip I got just in case.. This is my config:

/ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.1.1 to-ports=3389 dst-address=a.b.c.d dst-port=3389 protocol=tcp comment=“Forward Port 3389 from Public to 192.168.1.1” disabled=no

And a.b.c.d is ofcourse my external ip.
Within WinBox I placed this nat rule before the masquerade.

The destination is on eth4 if it helps anything?

I cannot figure out what I am doing wrong?

2

Also create an allowance rule in the firewall filter rules.
/ip firewall filter
add chain=forward protocol=tcp dst-address=192.168.1.1 dst-port=3389Maybe you can share your firewall filter rules for proper advice.

The position of the NAT rule (above or below the masquerade rule) makes no difference because both are in different chains.