[SOLVED] Confused with port forwarding for web server

RouterOS Beginner Basics
1

Hello people! First of all, I got an RB751U-2Hnd so I did the first setup almost …automagically from quick set. I don’t know enough (yet)!

It’s something like this: Lan > Mikrotik > PPPoE bridge to ADSL Router > Internet.

In LAN among others, I have a linux server. I wanted to see it from the ..outer world. So I started with SSH.
I got it listen to 65535 and made a rule like the nat_ssh screenshot.

Trying to login from a different location with the WAN IP of my provider it worked! Huray! Let’s do the same for the 80 I said..

But 80 is used by mikrotik… So first of all I moved mikrotik to 8080 like that:
/ip firewall nat> service set www port=8080 address=0.0.0.0/0 disabled=no

Now I could see mikrotik web interface at port 8080 from wan ip and lan ip. Good. Now 80 is free for my linux server.

I did the EXACT same configuration as port 65535 for SSH for port 80 (you can see it in screenshot) but it doesnt work.

Any ideas what I did wrong ? Or what I should try ?

Ignore rule #1 and #2 I was doing experiments for torrents, it worked so I didn’t touch them. Rule #0 was already there. Maybe from the Quick Set / Auto configuration ?

EDIT:
I tried to make port 8181 to 80 but nothing.
Then I tried to make Apache listen to 8181 and make dstnat 8181<>8181 still nothing.
But ssh still working like a charm.
nat_ssh.png

2

Did you try port 80 from the internet before you tried this? Some ISPs block port 80 to non-commercial accounts. I use port 8088 instead. I leave the http server listening on port 80.

/ip firewall nat
add chain=dstnat action=dst-nat dst-port=8088 protocol=tcp to-addresses=10.23.21.36 to-ports=80 in-interface=Internet-HOL

http://1.2.3.4:8088

3

When on default, mikrotik was running just fine on 80 from wan ip

4

I am sorry I am just super stupid! :blush:

I was testing inside the lan with
http://WAN_IP and it didn’t worked, then testing http://WAN_IP:8080
and the Mikrotik was working just fine. :blush:

But from another workstation OUTSIDE the lan, I could see both :80 port and :8080.


Being able to see Mikrotik with wan ip from local lan tricked me and I was thinking that id doesn’t work. :blush: