Port Mapping (opening port) fails [SOLVED]

RouterOS General
1

Hello guys,

I am new on the forum, also new with the mikrotik.

I have one problem with openning port.

So I want to access from my public IP and certain port to access my internal machine in LAN.
So from xxx.xxx.137.18:8889 to access on 192.168.20.219:80

Here is my configuration:
IP > Firewall > NAT

add action=dst-nat chain=dstnat dst-address=xxx.xxx.137.18 dst-port=8889
in-interface=bridge1 log=yes protocol=tcp to-addresses=
192.168.20.219 to-ports=80

Also I have tried ether1-MTSOptika as interface.

IP > Firewall > Filter rules

add chain=forward comment=Denis dst-address=192.168.20.219 dst-port=8889
in-interface=bridge1 log=yes protocol=tcp

I have tryed both rules with different interfaces, with dst-address without dst-address.

Here is my IP > Addresses

add address=xxx.xxx.137.18/30 interface=ether1-MTSOptika network=xxx.xxx.137.16
add address=xx.xx.149.82/30 interface=bridge1 network=xx.xx.149.80
add address=xx.98.0.218/30 interface=bridge1 network=xx.98.0.216
add address=192.168.20.1/24 comment=“Default Configuration 08.08.2016”
interface=bridge1 network=192.168.20.0
add address=xxx.xxx.137.18 interface=bridge1 network=xxx.xxx.137.18

Here is LOG:

So could someone help me please?

If you need more details please, I will provide so I can solve this problem, its urgent for me to solve it.

Thanks !

2

Forward chain comes after dstnat, so the right dst-port there is 80. If you have dst-address in dstnat rule, you don’t really need in-interface, but if you keep it, the right one should be ether1-MTSOptika (and same in forward). Either way, you need to test it from outside, it won’t work from same LAN where server is (unless you add hairpin NAT).

3

Hello,

I have solved it, just adding on NAT and Filter rule in. interface ether1-MTSOptika.

Thank you!

Best regards