Port forwarding doesn't work

RouterOS Beginner Basics
1

Hello, help me please. I’ve webserver on my local machine and I want it’ll be available from the Internet. I’m trying to open port on my Mikrotik router with default settings (I configure it with Quick Set) and nothing happens. I followed numerous guides from Internet (like this one for example http://forum.mikrotik.com/t/how-to-just-open-ports/51574/1) but nothing work
I’m trying something like:

 /ip firewall nat add chain=dstnat dst-port=12345 action=dst-nat protocol=tcp to-address=192.168.88.253 to-port=12345

where 192.168.88.253 is address of my local machine and 12345 is desired port
Than I go to site for port knocking (like yougetsignal.com/tools/open-ports/) and it said port closed.

Also I tried to change parameters like “In. Interface” to ether1_gateway and “Dst. Address” to my external IP address and a couple more nothing again.
After that I added to filter rules something like:

 /ip firewall filter add chain=forward protocol=tcp port=12345 action=accept

And still nothing. Even Packets and Bytes show “0”

I hope you can help.
P.S. On my local machine I disable firewall.

2

Read this: http://forum.mikrotik.com/t/port-forwarding-problem/93224/16

3

I think you also need something like this
http://wiki.mikrotik.com/wiki/Hairpin_NAT

4



Thank you guys, looks like to get it work I need to know some theory. I’ll read and try it. And post if succeed.

5

What you need to remember is that packets processed by dst-nat have to come from somewhere. Right now, you only have a dst-port defined. Try adding an in-interface parameter or a dst-address parameter to your NAT rule. If you have a dynamic public IP, I’d recommend simply defining the in-interface as your WAN interface, that way only traffic coming in through that interface on the specified port matches your dst-nat rule.

6

.. And firewall on your local machine has to pass the incoming traffic from the outer world…