port forwarding to 1 web cam.

RouterOS Beginner Basics
1

QOD-port-fwdg

PB750gr3, FW:V:3.35 ) : set as ROUTER mode. and auto connect. (all that works)
wired to 16channel cable modem. and works. and is JUST a model, no wifi here, no AP , no routers of ANY KIND inside the ARRIS(MOT) SB6183
picture 3 parts ARRIS>>> PB750 (New)>> PC — and say 1 foscam we camera the goal not attained.
winbox.exe v6361
ARRIS modem , automatic mode works direct to my PC or to any of 3 other routers on my service shelf, (new or most are no longer supported )
The ARRIS oobe , works great as switch and firewall (routing all that) passed all external tests for exploits wan side.

have noIP working for 5 years, now. no issues. DNS resolves to ,my IP at home. (ISP blocks all ports above 1024 and some below, including 80,and 87 but not all)
most of my browers now block raw IPs or ports or both, but not my beloved (i test bed, Firefox v20 protable)
all works great but the punching a hold in the fire wall and winbox.exe shows no port forwarding pages… oops.. looks like Im in trouble… and am.

the camera is at 10.10.10.191:88 using a fixed IP. (bound /reserved) “foscam-FI9831p”
the camera works local, using Firefoxv20. with URL as IP. (old ff as new one now blocks ID raw, local, ) just for testing I do that.
router base is 10.10.10.100 and DHCP to 199. (span) DNS to 8.8.8.8.
fixed IPs set. for my cam using 750 setups.
even my MKV video server works (local only sure)
All PCs on the gigalan all work and can use internet here at home (2 switches 1glan , distributed all over home) as do all TV(smart) function.

No problems it all works ok, out of box. just need the fire wall (slip through) for port 88.

tried many examples by others. (me googling and reading many here)
tired winbox.exe , nice app.

using that, i clicked IP+firewall + NAT tab.
before masquerade entry (set, out of box default) added these answers for below..
using…winbox.exe I set…
chain = dstnat
src.Address (blank) IDK
dst.address = 10.10.10.191
protocol=6(tcp)
src port, 88
dst.port 88
in. interface=ether1 ?


The web url we used is (NoIPdomain.me:88) for years no problems, I have web page (not at home) that talks to the cam log in as guest and shows live video. ) working for years.

thanks for any help. good day.

2

You need to set an action of dst-nat. You also don’t need to specify source port, as this will be randomly chosen when the connection is established. Try this:

chain = dstnat
protocol=6(tcp)
dst.port 88
action = dst-nat
to-addresses = 10.10.10.191
to-ports = 88

3

thanks ! very much,

1st camara working, then more later will be easy.

i tried those setting but does not work
the problem is there are vast setting there, the winbox.exe shows vast settings.
my guess most are nulled out and ok.

4

Hold up, your Mikrotik router is behind a cable modem that is giving out 192.168.100.0/24 addresses, so your ether1 interface is in this range?

Have you set up port forwarding on your cable modem? If not, that’s where you need to start. Whichever device gets the public IP is where you need to do the initial port forward. Then you have a choice - either set the port forward on the modem directly to 10.10.10.191 if you have dynamic or static routing enabled, or set up a second port forward on the Mikrotik. The second option means your port forward on the modem needs to point to the Mikrotik ether1 IP address, so it will need to be static (not DHCP).

Your dstnat rule still needs work. Under the General tab, you only need to specify the chain (dstnat), protocol (TCP) and dst. port (88). Remove everything else, as this tab is where you set up what traffic to match.Leave the action tab as you have it.

/ip firewall nat
add chain=dstnat protocol=tcp dst-port=88 action=dst-nat to-addresses=10.10.10.191 to-ports=88 log=yes log-prefix=cam-frnt

You will then have two port forwards:
on cable modem: public-IP:88 → MT-ether1-IP:88
on Mikrotik: MT-ether1-IP:88 → 10.10.10.191:88

5

thanks ! very much,! and all gear in home is mine, except the cable coax raw my owned ARRIS SB6183 (16channels, and all are on a UPS , modem and router HEX.
DOCSIS 3.0 modem neat. does 200mb/s DL, now. flies fast.
the modem is JUST a DOCSIS model , no other features of any kind there.
it works MODEM to PC direct, all day or to any of my 4 other parked routers (parked in my attic storage (PC zone retired))
the modem works with this HEX router ok, only

PORT forwarding fails. hard.

6

all remote scans (tried many types) all fail port closed.

arris spec.
https://arris.my.salesforce.com/sfc/p/#30000000kUAL/a/a00000009iIt/tsUet10ipdetAQq6Hawt7A0H8X.jhs4uQdc37JYDAJE=

7

OK, ignore my post about the cable modem setup, it’s red herring but I just wanted to be sure.

Have you tried the NAT rule I posted?

8

thanks, no problems with herrings. lots and lots of modems there are.
yes i did tat straightaway.
i revised my photo 1 and 2 above

deleted 1 line , dst…address
and changed 6(tcp) to just tcp

and it fails. port 88,
fails the remote , scans
and my remote web site that accesses it directly .(the camera)
local works.

PS: using winbox.exe to make changes , open to all ways , of course !

9

ok the port now shows open, with new CLI , recommendations. thanks
but the camera is dead.
my guess is this.
1: java blocked. (nah not at this level?)
2: UDP, the camera page, does ,use UDP comms. the book on programming for the camera show it messing about at port 1000. my guess is this is limited on the HEX

one guy reports this. netscans and wireshark’d
554,80,5000 and 49152

10

i give up

11

I give up (no port forwarding in the menu’s wow)
towel throw time. (all worked for 5 years all cams on all router but this, only fire wall changed with HEX)
off to Cisco, (SB small business grade)

PS: I do know it can work, only how is alluding me.

12

Can you post the rule as you have it now? Did you remove the source port?

13

sure :smiley: and thanks

links to current settings. Adv tab (table empty) Extra tab (table empty (nulled out) and…these only … below have data …(params)




zen nMap shows 88 open
and this wild stuff on this IP


4444/udp open|filtered krb524

10000/udp open|filtered ndmp

18485/udp open|filtered unknown

20217/udp open|filtered unknown

23679/udp open|filtered unknown

28122/udp open|filtered unknown

36108/udp open|filtered unknown

51972/udp open|filtered unknown

52503/udp open|filtered unknown

14 
/export hide-sensitive