Port Forwarding Not working ... Confused

hi all

my network setup is basic using the default config

wan is on ether1 via a fibre connection using pppoe dynamic ip address

lan is on eth2 to a unmanaged switch

doesn’t matter what i do cannot get it to connect from other wan connections

its a team speak server so udp port 9987

local lan ip to

its so annoying because normally i can figure this stuff out

any idea guys

i did a shields up says everything is closed

/ip firewall nat


Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade out-interface=pppoe-out1 log=no
log-prefix=“”

1 chain=dstnat action=dst-nat to-addresses=192.168.88.252 to-ports=9987
protocol=udp in-interface=ether1-gateway dst-port=9987 log=no
log-prefix=“”



0 chain=forward action=accept protocol=udp dst-port=9987 log=no
log-prefix=“”

1 ;;; default configuration
chain=input action=accept protocol=icmp log=no log-prefix=“”

2 ;;; default configuration
chain=input action=accept connection-state=established log=no
log-prefix=“”

3 ;;; default configuration
chain=input action=accept connection-state=related log=no log-prefix=“”

4 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway log=no
log-prefix=“”

5 ;;; default configuration
chain=forward action=accept connection-state=established log=no
log-prefix=“”

6 ;;; default configuration

chain=srcnat action=masquerade out-interface=pppoe-out1 log=no log-prefix=“”

chain=dstnat action=dst-nat to-addresses=192.168.88.252 to-ports=9987
protocol=udp in-interface=ether1-gateway dst-port=9987 log=no
log-prefix=“”

Feel the difference?
Your internet connection is “pppoe-out1”. Use this name for all external rules.

still no luck :frowning: rebooted as well current config

so ive changed nat to the pppoe-out1

not to sure what to put in filters i remved the ones i had mad thinking they could have been the issue.. so now filters i think is in its default state

not sure what to do next

EDIT: got it going :smiley: had to move rule up the list and it worked

Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; default configuration
      chain=srcnat action=masquerade out-interface=pppoe-out1 log=no 
      log-prefix="" 

 1    chain=dstnat action=dst-nat to-addresses=192.168.88.252 to-ports=9987 
      protocol=udp in-interface=pppoe-out1 dst-port=9987 log=no log-prefix="



Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; default configuration
      chain=input action=accept protocol=icmp log=no log-prefix="" 

 1    ;;; default configuration
      chain=input action=accept connection-state=established log=no 
      log-prefix="" 

 2    ;;; default configuration
      chain=input action=accept connection-state=related log=no log-prefix="" 

 3    ;;; default configuration
      chain=input action=drop in-interface=ether1-gateway log=no 
      log-prefix="" 

 4    ;;; default configuration
      chain=forward action=accept connection-state=established log=no 
      log-prefix="" 

 5    ;;; default configuration
      chain=forward action=accept connection-state=related log=no 
      log-prefix=""

I’m having the same issue, It’s almost embarrassing to admit.
Ever since I upgraded my mikrotiks to v6.20 simple port forwarding doesn’t work. I tried sniffing, inbound and outbound. traffic comes and goes, I can not capture packets on the WAN so I cant tell you if NAT is actually translating the source address.
However I have had several other mikrotik certified trainers look at this. Everyone agrees that the config is setup properly.
here is the config, so simple it’s embarrassing:

/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-gateway
add action=dst-nat chain=dstnat connection-type=“” dst-port=80 protocol=tcp to-addresses=192.168.1.15 to-ports=80

and yes, the default gateway on the internal host is correct…
if anyone knows what to do, let me know,
I’m going to downgrade those mikrotiks which have v6.20 on them.

pennytone,
Try to change a port. I think that 80 is busy by RB (web interface).
Or change www-port in “Winbox-IP-Services”.