I try to open a 88 port for CCTV on IP 192.168.1.102 and followed all in Mikrotik manual but still no access.
all my configurations above:
/ip firewall nat
add chain=dstnat dst-address=192.168.1.1 dst-port=88 protocol=tcp action=dst-nat to-addresses=192.168.1.102
In the rule it should probably be WAN IP of router in dst-address field, not its LAN IP …
Where are you connecting from, LAN or WAN? If from LAN, then you should implement hair-pin NAT … in addition to normal NAT or instead of it, depending on how you want to have it.
In another words, draw your scenario (a photo of a handmade drawing is sufficient provided that it contains all the details) and export your existing configuration. See hints on anonymisation in my automatic signature.