RouterOS and Shoutcast Server

Hello all,

I’ve got a problem with shoutcast, a program for broadcasting internet radio. I opened the port on the router (port 8000) but when I type my IP into the internet browser followed by port :8000 I do not the Shoucast page as I should.

Any help please?

show your nat rules
/ip firewall nat print

in Telnet, ip/firewall/nat/print gives:


0 chain=srcnat action=masquerade out-interface=EOLO

1 chain=dstnat action=dst-nat to-addresses=192.168.2.250
to-ports=5900
protocol=tcp dst-address=78.134.0.0/16 dst-port=5900

2 chain=dstnat action=dst-nat to-addresses=192.168.2.250
to-ports=63392
protocol=tcp dst-address=78.134.0.0/16 dst-port=63392

3 chain=dstnat action=dst-nat to-addresses=192.168.2.250
to-ports=8000
protocol=tcp dst-address=78.134.0.0/16 dst-port=8000

4 chain=dstnat action=dst-nat to-addresses=192.168.2.250
to-ports=8001
protocol=tcp dst-address=78.134.0.0/16 dst-port=8001

5 chain=dstnat action=dst-nat to-addresses=192.168.2.250
to-ports=1723
protocol=tcp dst-address=78.134.0.0/16 dst-port=1723

Oh and by the way the other NAT rules are for opening ports, perhaps they need translate=yes?

you also need port 8001 for SC to work properly
further more, if you assign some custom port N for SC server, you need to open both ports N and N+1, because of the way SC works

refer to: http://www.shoutcast.com/support

D3. I’m behind a firewall/proxy. Can I still use the DNAS to broadcast?

Answer: Tricky question. Users behind proxies cannot. Users behind NAT devices can, provided the same port the SHOUTcast Radio server runs on is set up to forward from the NAT device to the SHOUTcast Radio server. Users behind firewalls can also get a hole punched so listeners can penetrate. If broadcasters also need to get in from the outside world, you should open the hole for PortBase + 1 (i.e. id SHOUTcast Radio runs on 8000, 8001 should be open for broadcasters to get through as well.)

Thanks for your reply burek. If you look at the above rules you can see I already forwarded port 8000 and 8001 but no luck. :frowning:

yes I see, sorry, I haven’t payed attention to it the first time..

this example forwards all ports from the public ip of 78.134.1.1 to a private ip of 192.168.2.250:

chain=srcnat src-address=192.168.2.250 action=src-nat to-addresses=78.134.1.1 to-ports=0-65535
chain=dstnat dst-address=78.134.1.1 action=dst-nat to-addresses=192.168.2.250 to-ports=0-65535

you can do something like this if you want specific ports only:

chain=srcnat src-address=192.168.2.250 action=src-nat to-addresses=78.134.1.1 to-ports=5900,63392,8000,80001,1723
chain=dstnat dst-address=78.134.1.1 action=dst-nat to-addresses=192.168.2.250 to-ports=5900,63392,8000,80001,1723