port forwarding issues newbie

Hey Guys,

i just got myself my first mikrotik router a hap ac and have been trying to configure it for my general use but am having a terrible time trying to port forward on the thing

dec/01/2016 12:28:51 by RouterOS 6.36.4

/ip firewall filter
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=accept chain=input dst-port=8700 in-interface=WAN log=yes
protocol=tcp ## using this as a remote into winbox ## working fine
add action=accept chain=input comment=“defconf: accept established,related”
connection-state=established,related
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related
add action=accept chain=forward comment=“defconf: accept established,related”
connection-state=established,related
add action=drop chain=input comment=“defconf: drop all from WAN”
in-interface=WAN
add action=drop chain=forward comment=“defconf: drop invalid”
connection-state=invalid
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new in-interface=WAN


/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
out-interface=WAN


add action=dst-nat chain=dst-nat comment=“Game Ports” dst-port=
7777,27015,8888 in-interface=WAN protocol=tcp to-addresses=192.168.1.220
add action=dst-nat chain=dst-nat dst-port=7777,27015,8888 in-interface=WAN
protocol=udp to-addresses=192.168.1.220


add action=dst-nat chain=dst-nat comment=RDP dst-port=3389 in-interface=WAN
log=yes protocol=tcp to-addresses=192.168.1.221 to-ports=3389
add action=dst-nat chain=dst-nat dst-port=3389 in-interface=WAN log=yes
protocol=udp to-addresses=192.168.1.221 to-ports=3389
add action=dst-nat chain=dst-nat in-interface=WAN log=yes protocol=rdp
to-addresses=192.168.1.220

what am i missing? in my testing stage i have opened up both TCP and UDP ports and for RDP even with as far as setting its own

from what i can tell i have new connections passing through the forward filter if they are dst-nat
as well as my established and related accepted

if i unplug the router and use a soho tp-link router my forwarding all works, so its a firewall issue on the mikrotik?

any advice would be great

Anthony

Are you testing from inside (same LAN) or outside (internet)? If from inside, you want to read this.