Please help with port forwarding

RouterOS General
1

Hi,

My new router arrived today and I’ve been scratching my head for the past 4 hours trying to setup a very simple port forwarding rule with no luck at all.
I’ve seen videos and read a lot about this, but all the examples do not seem to work for me…

I want to forward all traffic on ports 8080 and 1883 to my RaspberryPI, with has the static IP 192.168.0.10. Can someone please help me?

This is what I’ve got so far. Please note that I don’t know what the hell is “masquerade” and how it should be configured. All the examples I found have different configs for that.

[admin@MikroTik] /ip firewall> nat print 
Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; defconf: masquerade
      chain=srcnat action=masquerade out-interface=ether1 log=no log-prefix="" ipsec-policy=out,none 

 1    chain=dstnat action=dst-nat to-addresses=192.168.0.10 to-ports=1883 protocol=tcp in-interface=ether1 dst-port=1883 log=yes log-prefix="" 

 2    chain=dstnat action=dst-nat to-addresses=192.168.0.10 to-ports=8080 protocol=tcp in-interface=ether1 dst-port=8080 log=yes log-prefix=""
2

action=masquerade is like action=src-nat, but instead of getting the new src-address as a parameter, it takes the one of the interface through which the packet is being sent outside the box. It is there for cases when the address dynamically changes, and thus also all connections which have been masqueraded to that address are dropped from connection-tracking once the address changes or the port goes down.

For dst-nat (port forwarding) of client request packets which come to your device from the internet, instead of to-address=the.unknown.ip.address, use in-interface=your-wan-interface i the action=dst-nat rules.