Remote access from the Internet (WAN side)

However I look I just cant seem to figure out how to enable remote access on my RG750G
I would like to open it so I can access remotely via Winbox.

If anyone could give me some pointers preferably in Winbox I would be grateful.

What do you mean by Remote access. ?? Remote Desktop ??

No, remote access to the RB750 with Winbox.

(to remotely control the router with Winbox).

create an Input rule to allow Port 8291 from the internet.

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp

be sure to place it above any rules dropping Input.

I would also consider specifying which hosts can connect rather than leaving it wide open.

If you have a Live IP then just configuire that on ur WAN Interface otherwise if you are using some DSL connection then contact ur ISP to configure Port address translation on DSL modem.

Thank you, this works if I disable the drop rule in filter, but I belive its not a good idea to do that. How do I move this nat rule above the filter rule to drop?

Yes the Mikrotik is connected to brodband internet (optical), im useing the Mikrotik as the primary router.

If you have a Live IP then just configuire that on ur WAN Interface

That was my question, how do I do that

just drag that rule to top of the list…

are u using some PPPOE interface for WAN ??

In Winbox you can simply drag the rule with your mouse to a position above the other rules :slight_smile:

Nat and Filter rules are not in the same category, I cannot drag from NAT to Filter rules.

Cue,

I think the confusion is everyone is assuming your drop rule is in filter not nat, as that is typically where it would be.

Perhaps if you provide the rules we can clear up the confusion.

Paste the out put of these commands into a reply.
In terminal window:
/ip firewall filter export
/ip firewall nat export

I just have the default rules.

I ran this command.

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp

That created a NAT srcnat using port 8291 TCP, nothing in “filter rules”.

hi
you can enable or disable winbox port from ip/service.

Use this command…

/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp place-before=0

hi dude I have a problem with this can you help me?
first of all after I enable DDNS, in the status section it tells me that:
“DDNS server received request from ip …(the public ip adress)… but your local ip was 192.168.1.6 (which is my gateway ip). DDNS service might not work.”
and I can’t ping the DNS name it gives me 100% timeout then I’ve added this command:“/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp place-before=0”
but this didnt help either! :neutral_face:
what should I do?
I have ip cameras in my work place and I want to watch them from home via this feature.
can you help me?

192.168.1.6 (which is my gateway ip)

It sounds like your Mikrotik is itself behind a firewall with NAT. The wlan address used for DDNS cannot be a 192.168 address. See “private addresses” at http://en.wikipedia.org/wiki/IP_address. For DDNS to work, the Mikrotik would need to be connected directly to the internet instead of behind NAT.

even i want to access my Mikrotik 5shpn radio from home which is installed on ISP premise. How can i access radio from winbox.

Hi,
I have tried your command but I can’t access my routerboard.
When I try to access from WAN side I get “ERROR: Gateway timeout” from web browser and “connection refused” from Tik-App (android)

yes, but if you have “drop all” firewall rule at the bottom of your all firewall rules then you need also allow 8291 port to your router input chain.