Hello
happy to be in the community 
i am observing a strange issue with my mikrotik 751U-2HnD.
i can not access the web interface form the public wan ip.
i am able to ping the public ip and when i do a portscan from internet i can see that port 80 is opened.
every help could be useful as i am new to Mikrotik.
Take a look at /ip firewall filter. Anything in there that blocks the input chain on the public port?
hello
nothing there:
[user@mikrotik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
[user@mikrotik] /ip firewall filter>
do you need any logs? or other printouts?
When you try to access your router’s port 80 from the internet, are you going through your ISPs network? Many ISPs are blocking port 80 requests from the internet to non-commercial ip addresses. Mine does, but I have a commercial account.
Hello
i have a public IP with a dedicated fiber connection for commercial reasons.
the IP is reachable form everywhere.
till 3 days ago i was able to access miktorik web interface by just putting my ip address on the web browser
from every isp of my country ( and also from abroad)
but it suddenly stopped working.
what makes me doubtfull is that the router is responding on port scanning for port 80
thanks again
And you haven’t done anything in “/ip firewall nat” lately? If not, I would check with your ISP to see if anything changed on their end.
hello
i have only one these on /ip firewall nat
[user@mikrotik ] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade
1 chain=dstnat action=dst-nat to-addresses=192.168.1.100 to-ports=3389 protocol=tcp dst-address=xx.xx.xx.xx
[user@mikrotik ] /ip firewall nat>
where xx.xx.xx.xx is my public ip address.
maybe this is my fault 
I think this may be causing your problem:
1 chain=dstnat action=dst-nat to-addresses=192.168.1.100 to-ports=3389 protocol=tcp dst-address=xx.xx.xx.xx
/ip firewall nat
set 1 dst-port=3389
hi again
since i am a newbie
what do you mean?
should i run:
set 1 dst-port=3389
can you help me understand what it does and if it affects anything else?
many thanks again for the help
Your current dstnat is sending all public ip ports to 192.168.1.100:3389, including any port 80 requests.
/ip firewall nat
set 1 dst-port=3389
This will forward only requests to your public ip port 3389 to 192.168.1.100:3389. It shouldn’t affect anything else.
it worked perfectly !!!
many thanks indeed for the clarifications and help