Hi all.
My setup: Mikrotik lhg5 antena/router providing internet to OpenWrt home router with a Raspberry pi server behind it.
I have no admin access to the Mikrotik - my ISP controls it.
I’ve set up port forwarding on OpenWrt but couldn’t ssh from the internet. Run tcpdump on OpenWrt and saw no incoming packets. Then run debugging session with ISP - when he was logged in to the Mikrotik router and tried to ssh, I saw incoming packets. So now I’m pretty confident it is the fault port forwarding on Mikrotik router - which I have no access to and no knowledge of. Below are settings I obtained from my ISP, any help would be greatly appreciated.
/ip firewall filter> print Flags: X - disabled, I - invalid, D - dynamic 0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp log=no log-prefix=“”
2 ;;; defconf: accept established,related
chain=input action=accept connection-state=established,related log=no
log-prefix=“”
3 X ;;; defconf: drop all from WAN
chain=input action=drop in-interface=wlan1 log=no log-prefix=“”
4 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection
connection-state=established,related log=no log-prefix=“”
5 ;;; defconf: accept established,related
chain=forward action=accept connection-state=established,related log=no
log-prefix=“”
6 X ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid log=no log-prefix=“”
7 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new
connection-nat-state=!dstnat in-interface=wlan1 log=no log-prefix=“”
/ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface=wlan1 log=no log-prefix=“”
1 ;;; 2
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=333 protocol=tcp
dst-address=92.xx.xx.xx dst-port=333 log=no log-prefix=“”
2 ;;; 2udp
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=333 protocol=udp
dst-address=92.xx.xx.xx dst-port=333 log=no log-prefix=“”
3 ;;; 3
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=80 protocol=tcp
in-interface=wlan1 dst-port=80 log=yes log-prefix=“”
4 ;;; 3udp
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=80 protocol=udp
in-interface=wlan1 dst-port=80 log=no log-prefix=“”
5 ;;; 4
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=443 protocol=tcp
dst-address=92.xx.xx.xx dst-port=443 log=no log-prefix=“”
6 ;;; 4
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=22 protocol=tcp
dst-address=92.xx.xx.xx dst-port=22 log=yes log-prefix=“”
7 ;;; 4udp
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=443 protocol=udp
dst-address=92.xx.xx.xx dst-port=443 log=no log-prefix=“”
8 ;;; 4udp
chain=dstnat action=dst-nat to-addresses=192.168.88.254 to-ports=22 protocol=udp
dst-address=92.xx.xx.xx dst-port=22 log=yes log-prefix=“”