Port forward on ZeroTier

[knippers]

You are missing a src-nat for the ZeroTier network. It should look like your first rule with the src-address=192.168.193.0/24 and to-address=192.168.0.2. Or you can put a route to 192.168.193.0/24 on the remote Mikrotik pointing to 192.168.0.2.

Thanks that fixed it. So if I understand correctly I was missing the route back from 192.168.0.1 to 193.168.193.222 via the 192.168.0.2?

For others:

 0    chain=srcnat action=masquerade protocol=tcp src-address=192.168.0.0/24 dst-address=192.168.0.1 out-interface=LAN log=yes 
 1    chain=srcnat action=masquerade to-addresses=192.168.0.2 protocol=tcp src-address=192.168.193.0/24 
 2    chain=dstnat action=dst-nat to-addresses=192.168.0.1 to-ports=8291 protocol=tcp dst-address=192.168.193.222 in-interface=zerotier1 dst-port=8292