RDP for server not working

Hello. Is my first post here an until now i’ve learned much from here.
I have an network witch is working well. Untill few days ago i was able to connect from home to Server at work for maintenance. Because the main server has 3389 default port for RDP, i set for the other 2 servers ports 3390 and 3391. I was able to connect to my other servers (x.x.x.x:3390 and x.x.x.x:3391) with no issues. Now, i can’t connect anymore. Port forwarding has no changes and other ports are forwarded ok. For example i set for test the port 32400 for PLEX and is open. The rest are closed. I observ that the ports 21, 22, 23 or other common ports are closed. I see that the ports 22 have closed from default, but i don’t need it and i will leave like this. Can you help me with this issue? In last 2 months i work from home and is very hard without this connections. I don’t want to use teamviewer or other apps for remotely control my servers. Thank you.

My config.
My interest is for Server DC1 and Server DC2 mostly.
/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
out-interface=pppoe-out1
add action=masquerade chain=srcnat comment=“masq. vpn traffic” src-address=
192.168.89.0/24
add action=dst-nat chain=dstnat dst-address=192.168.88.44 dst-port=8000
in-interface=bridge layer7-protocol=Grant protocol=tcp src-address=
192.168.88.44 to-addresses=192.168.88.44 to-ports=8000
add action=dst-nat chain=dstnat dst-address=192.168.88.126 dst-port=1723
protocol=tcp to-addresses=192.168.88.1 to-ports=1723
add action=dst-nat chain=dstnat comment=“Remote desktop connection”
dst-address=“my-public-ip” dst-port=3389 protocol=tcp to-addresses=
192.168.88.88 to-ports=3389
add action=dst-nat chain=dstnat comment=“Server DC1” dst-address=
“my-public-ip” dst-port=3390 protocol=tcp to-addresses=192.168.88.126
to-ports=3389
add action=dst-nat chain=dstnat comment=“Server DC2” dst-address=
“my-public-ip” dst-port=3390 protocol=tcp to-addresses=192.168.88.158
to-ports=3391
add action=dst-nat chain=dstnat comment=Plex dst-address=“my-public-ip”
dst-port=32400 protocol=tcp to-addresses=192.168.88.126 to-ports=32400
add action=dst-nat chain=dstnat dst-address=“my-public-ip” dst-port=3389
protocol=tcp src-address-list=192.168.88.125-192.168.88.159 to-addresses=
192.168.88.88
add action=dst-nat chain=dstnat dst-address=“my-public-ip” dst-port=3391
protocol=tcp to-addresses=192.168.88.87-192.168.88.159 to-ports=3389
/ip route
add distance=1 dst-address=10.10.10.0/27 gateway=10.0.0.1 pref-src=
“my-public-ip” scope=10
add distance=1 dst-address=10.10.10.0/27 gateway=10.0.0.1
/ip service
set telnet disabled=yes
set www port=8080
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set forwarding-enabled=remote
/ip upnp
set enabled=yes

You config is, erm… interesting. Just RDP rules:

  • #5 forwards port 3389 to 192.168.88.88:3389
  • #6 forwards port 3390 to 192.168.88.126:3389
  • #7 would forward port 3390 to 192.168.88.158:3391, but it never will, because #6 will take it first
  • #9 is useless duplicate of #5 with additional condition, and it has the same problem as #7, nothing will ever get to it
  • #10 forwards port 3391 to I’m not even sure where, I’m honestly not sure what’s the behaviour of to-addresses= with dst-address=

For a better understanding of what you are trying to accomplish with what are very complex if not confusing destination nat rules.

What are the use cases?
What do you want users to be able to do and where are they located?