Hi folks, hope this post finds you well!
I’m trying to set up RDP Shortpath to improve my connection to my work remote machine. To do so, I need to open some ports:

However, I can’t understand how to set up those via WinBox.
I’m using MikroTik Cloud’s DDNS solution to get my public IP, and added the DDNS name as an address list. (Although I don’t think its needed since I can filter my NAT rules as out-interface-list=WAN and it would be the same thing, right?)
/ip cloud set ddns-enabled=yes
/ip cloud force-update
/ip firewall address-list add address=dnsname.example list=public-domain comment="my public ip via mikrotik ddns"
My question is how can I set dst-nat to match those port/ip/protocol requirements, I initially tried creating a dst-nat with dst-address-list of my public-domain list, with to-addresses of the specified ip and 3478:
/ip firewall nat
add action=dst-nat chain=dstnat comment="port forwarding for STUN" dst-address-list=public-domain protocol=udp to-addresses=20.202.0.0/16 to-ports=3478
But it doesn’t work, is it because the required destination address/port should be filled in the src-address src-port instead? In that case it wouldn’t work as well as I need to specify to-ports or to-addresses, right?
Furthermore, for the 443 TCP rule, if do the same way as I did above, it would break my internet connection as every HTTPS request coming through my IP will be redirected to that fixed ip.
So, how should I setup this? Am I mistaken and should be using something else instead of dst-nat?