Port forwarding

RouterOS Beginner Basics
1

Hi, everyone.
Trying to enable connection to my http server from outised.
From 8080 port to http server 80.
Whats wrong here?

/ip firewal nat print
Flags: X - disabled, I - invalid, D - dynamic 
 0    chain=dstnat action=netmap to-addresses=192.168.88.80 to-ports=80 protocol=tcp 
      in-interface=pppoe-out1 dst-port=8080 log=no log-prefix="" 

 1    ;;; default configuration
      chain=srcnat action=masquerade out-interface=pppoe-out1 log=no log-prefix=""

Filters:

/ip firewal filter print
Flags: X - disabled, I - invalid, D - dynamic 
 0  D ;;; special dummy rule to show fasttrack counters
      chain=forward 

 1    ;;; default configuration
      chain=forward action=fasttrack-connection 
      connection-state=established,related log=no log-prefix="" 

 2    ;;; default configuration
      chain=forward action=accept connection-state=established,related log=no 
      log-prefix="" 

 3    ;;; default configuration
      chain=forward action=drop connection-state=invalid log=no log-prefix="" 

 4    ;;; default configuration
      chain=forward action=drop connection-state=new connection-nat-state=!dstnat 
      in-interface=ether1-gateway log=no log-prefix=""
2

use action=dstnat instead of netmap.

Netmap is a 1:1 stateless NAT mechanism, and the reason it’s not working is that you must also define a netmap for the opposite direction.
Stateful NAT (dstnat) does this automatically.

3

Changed netmap to dst-nat still “The connection has timed out”.

4

Are you testing from inside the local network, or from a remote host?

If inside - then you need to modify the configuration for hairpin NAT (there are many threads and Wiki articles on that subject)

If outside … does your Mikrotik have a public IP address on its WAN interface directly, or is it behind some other NAT?

5

I dont have any remote hosts now and testing it with tor browser, which let me test it from tor endpoints.
Yes i have fixed public IP. I can acces Mikrotik WebFig from tor endpoint.
When i trying 8080 port all what i see in logs:

dstnat: in:pppoe-out1 out:(none), src-mac dc:38:e1:1b:ed:dd, proto TCP (SYN), 197.231.221.211:19457->MY_PUBLIC_IP:8080, len 52