dannyo
October 17, 2017, 7:42pm
1
Hi,
Please help I have tried everything to get port forward working.
My setup is RB750 connected to a Billion in Bridge mode.
2 Interfaces Wan - Lan
PPPoe interface for connection
Internet is working but any forward rules are giving me a connection refused I have used the pppoe and wan as in interfaces.
Have you made sure your forward rules are above the default “drop all from WAN” rule?
dannyo
October 18, 2017, 3:10am
3
Yes I moved it to the top with the same results. I will post the output shortly.
dannyo
October 18, 2017, 1:15pm
4
Here are my rules:
Filter:
0 chain=forward action=accept protocol=tcp src-port=81 log=no log-prefix=“”
1 X ;;; default configuration
chain=input protocol=icmp
2 X ;;; default configuration
chain=input connection-state=established
3 X chain=forward action=accept protocol=tcp in-interface=ether1-gateway
src-port=81 log=no log-prefix=“”
4 X ;;; default configuration
chain=input connection-state=related
5 ;;; default configuration
chain=input action=drop in-interface=pppoe-out1
6 X ;;; Deny standard SSH
chain=tcp action=drop protocol=tcp dst-port=22
Nat Rules:
0 chain=dstnat action=dst-nat to-addresses=192.168.1.10 to-ports=80
protocol=tcp in-interface=pppoe-out1 dst-port=81
1 ;;; default configuration
chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=pppoe-out1
Interfaces:
0 R ether1-gateway ether 1500 1600
1 R ether2-master-local ether 1500 1598
2 S ether3-slave-local ether 1500 1598
3 RS ether4-slave-local ether 1500 1598
4 S ether5-slave-local ether 1500 1598
5 R pppoe-out1 pppoe-out 1480
Your filter rule number 3 is wrong.
It should work if you change as follows; in-interface=pppoe-out1 and dst-port needs to be 80 (not 81 as it has been nat’d to 80)
dannyo
October 20, 2017, 2:24pm
6
Thank you that worked like a charm.
Last question when I connect to the Mikrotik via the WAN it always responds with Permission denied when I authenticate?
I forward traffic to it maybe its a loop?