Port Forwarding help RG2011

RouterOS Beginner Basics
1

After many attempts looking hi and low on google at getting port forwarding to work I thought I would ask here before I burst a vessel. I have used pfsense in the past and never had any issues using the gui and port forwarding etc

I have the following two rules setup trying to forward tcp and udp from public interface (pppoe-out1) which is running on eth10, to an internal address for p2p.

2 chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=49151 protocol=tcp in-interface=pppoe-out1 dst-port=49151

3 chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=19532 protocol=udp in-interface=pppoe-out1 dst-port=19532

Have I missed something completely obvious? Using http://www.canyouseeme.org/ it says the ports are open?

Garth

2

Post the export from your ip filter and mangle.

Sent from my SCH-I545 using Tapatalk 2

3

Thanks for the reply

Ip filter

 0   ;;; default configuration
     chain=input action=accept protocol=icmp

 1   ;;; default configuration
     chain=input action=accept connection-state=established

 2   ;;; default configuration
     chain=input action=accept connection-state=related

 3   ;;; default configuration
     chain=input action=drop in-interface=sfp1-gateway

 4   ;;; default configuration
     chain=input action=drop in-interface=ether10-internet

and the mangle

[admin@MikroTik] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
4

Post the nat one also. Sorry forgot that one originally.

Sent from my SCH-I545 using Tapatalk 2

5

Here is the nat output

[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
 0   ;;; default configuration
     chain=srcnat action=masquerade out-interface=sfp1-gateway

 1   ;;; default configuration
     chain=srcnat action=masquerade out-interface=(unknown)

 2   chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=49151 protocol=tcp in-interface=pppoe-out1 dst-port=49151

 3   chain=dstnat action=dst-nat to-addresses=192.168.88.10 to-ports=19532 protocol=udp in-interface=pppoe-out1 dst-port=19532
6

I’m not 100% clear on your network is setup since the masq rule doesn’t seem to be setup at all. Does your NAT work at all? Are you sure the interfaces are correct?

For example you are using ether1-gateway in your filter rules, but pppoe-out1 in your dnat, and “unknown” in your masq.

7

Thanks again for the reply.

Since getting fiber broadband, open reach modems have issues with eth1-gateway port, something to do with the poe on that port.

I setup port 10 as the gateway port, then pppoe to use that port.

The unknown bit in masq, is well, unknown to me, should this be set to eth10?


From what I can tell, all is working fine in regards to nat, dial up vpns, browsing, games etc all work fine. I had an issue with the bit torrent client getting into a weird state, after killing it and restarting NAT is fine according to it now, and the is now outbound traffic.

8

I’d try setting the masq rule to out interface of pppoe-out1.