I need to release ports for external access to a client’s application, I released the firewall and NAT according to the materials available on the web, below are prints with the releases, even with the same ports appear as inaccessible in the test performed via the website (print also attached) and the application is not working externally, what can I do to resolve this issue?
To forward ports for incoming external traffic you need three things:
a. publicly reachable WANIP address ( or upstream router able to port forward to your mikrotik )
b. Single forward chain firewall rule.
add chain=forward action=accept comment=“port forwarding” connection-nat-state=dstnat
c. Properly formatted dstnat rules.
add chain=dstnat action=dstnat [either: in-interface-list=WAN (dynamic wanip) or dst-address=WANIP (static wanip) ]
dst-port=xxxxxxx protocol=yyy to-address=ServerIP {to ports only required if doing port translation}