Port forwarding and NAT issues

Hello,

first time using MikroTik and RouterOS! :slight_smile:

I have two VLANs (10 and 20) set up on one interface, and one WAN interface. VLANs can access each other and the internet. But for the life of me I can’t seem to set up port forwarding… I’ve tried everything I could find online.

I have to forward the port 80 of the host 172.16.0.8 (on VLAN 10).

I have no filters set up! I have also moved the WebFig to 8080.

Here is my config:

Interfaces:

0  R  name="ISP" default-name="ether1" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=E4:[REDACTED] fast-path=yes last-link-up-time=jul/18/2015 07:19:37 link-downs=0
8  R  name="lan" default-name="ether3" type="ether" mtu=1500 actual-mtu=1500 l2mtu=1598 max-l2mtu=4074 mac-address=E4:[REDACTED] fast-path=yes last-link-up-time=jul/18/2015 07:21:14 link-downs=0
11  R  name="VLAN10" type="vlan" mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=E4:[REDACTED] fast-path=no last-link-up-time=jul/18/2015 07:21:14 link-downs=0
12  R  name="VLAN20" type="vlan" mtu=1500 actual-mtu=1500 l2mtu=1594 mac-address=E4:[REDACTED] fast-path=no last-link-up-time=jul/18/2015 07:21:14 link-downs=0

Firewall:

0    chain=srcnat action=masquerade out-interface=ISP log=no log-prefix=""
1    chain=srcnat action=masquerade out-interface=lan log=no log-prefix=""
2    chain=srcnat action=masquerade out-interface=VLAN10 log=no log-prefix=""
3    chain=srcnat action=masquerade out-interface=VLAN20 log=no log-prefix=""
4    chain=dstnat action=dst-nat to-addresses=172.16.0.8 to-ports=80 protocol=tcp in-interface=ISP dst-port=80 log=no log-prefix=""

Thank you very much!!

More info:
I have another router set up in front of MicroTik, an ISP’s POS thing that I can’t get rid of. I have set up port forwarding there to the correct settings that worked before when I was using a Cisco router in the same configuration. I can’t access the forwarded port either from the Internet, nor from the ISP’s router network (192.168.5.0/24).

Youll have to excuse my relatively “low tech” reply here as I’m quite new to RouterOS myself but I have some port forwarding on my setup and it works great.

This is what I have working in mine currently;
chain=dstnat action=dst-nat to-addresses=192.168.1.23 protocol=tcp in-interface=pppoe-out1 dst-port=22 log=no log-prefix=“”

The only thing I see different is you have the additional"to-ports=80" so try removing this.

The problem remains mystery today. I “solved” it by renaming the ports.