port forwarding for ip cam

RouterOS Beginner Basics
1

Hi! im new to Mikrotik and i have problem with my port forwarding? my router is rb951ui-2hnd.
My ip cam 192.168.88.36 ,router ip 192.168.88.1 , port 80.
i use rule posted by Forum Guru ;
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=192.168.1.117 dst-port=6080
protocol=tcp to-addresses=192.168.88.51
add action=dst-nat chain=dstnat dst-address=192.168.1.117 dst-port=6001
protocol=tcp to-addresses=192.168.88.51
add action=dst-nat chain=dstnat dst-address=192.168.1.117 dst-port=6002
protocol=tcp to-addresses=192.168.88.51

my rule ;

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=192.168.88.1 dst-port=80
protocol=tcp to-addresses=192.168.88.36
add action=dst-nat chain=dstnat dst-address=192.168.88.1 dst-port=80
protocol=udp to-addresses=192.168.88.36
my port 80 stil closet i use canyouseeme.org.i see my cam on local net, but not outside
Thanks for help

2

i think u wann to view from wan ip


for this you should have live ip or real ip on mikrotik than only you can view from wan

3

You need to change your rules to include your public IP address.

/ip firewall nat
add action=dst-nat chain=dstnat dst-address=PUBLIC_IP_ADDRESS dst-port=80
protocol=tcp to-addresses=192.168.88.36
add action=dst-nat chain=dstnat dst-address=PUBLIC_IP_ADDRESS dst-port=80
protocol=udp to-addresses=192.168.88.36

This change should fix your problem.

4

Big Thanks! Just Joined for help ,but my be i need some firewall rules too?i check on canyouseeme.org look like port 80 still closet .

Thanks fo help!!!

5

If you are using the default firewall in the MT you will have to add these rules to the beginning of your list:

/ip firewall filter
add chain=input dst-port=80 protocol=tcp action=accept
add chain=input dst-port=80 protocol=udp action=accept

6

I also have this problem but the question I have about the last comment is this, by just opening port 80 is that opening to vulnerabilities? or is that only forwarding it to the specified NAT rule?

7

Use netmap with hairpin and port forwarding works fine for me…

8

The second set of rules was intended to work with the dst-nat rules so port 80 is open to the NATed address on the LAN.

9

Thank you much this is working for me on basic things such as web, ftp, etc.. but for whatever reason I cannot get plex media server to work.

10

Try maybe opening the plex ports…

https://support.plex.tv/hc/en-us/articles/201543147-What-network-ports-do-I-need-to-allow-through-my-firewall-

11

Try maybe opening the plex ports…

https://support.plex.tv/hc/en-us/articles/201543147-What-network-ports-do-I-need-to-allow-through-my-firewall-[/quote]


Thank you so much for that, I looked everywhere to see if there were more ports needed but couldn’t find them. The strange thing is I have a pfsense with another customer and the only port they need opened is 32400. Its really strange that Mikrotik would need more ports open when just the one is sufficient for pfsense.