Struggling With Simple Port Forwarding

Guys,

I apologize for asking this question but I’m at a loss here. I’ve read many of the “how to’s” on simple port forwarding and have followed the steps religiously but am still unable to get this to work.

I’m trying to access a Security System CCTV DVR from outside my network. I have the DVR assigned a static IP address of 192.168.100.110.
I have the HTTP port 8080 specified in the DVR instead of port 80. I am able to access the DVR from within my network using 192.168.100.110:8080 in the URL of my web browser but when I try to reach it using my Public IP address, it simply times out. I have the following firewall rules in place:

/ip firewall nat
add action=masquerade chain=srcnat out-interface=Public to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=8080 in-interface=Public protocol=tcp to-addresses=192.168.100.110 to-ports=8080
add action=dst-nat chain=dstnat dst-port=8000 in-interface=Public protocol=tcp to-addresses=192.168.100.110 to-ports=8000
add action=dst-nat chain=dstnat dst-port=10554 in-interface=Public protocol=tcp to-addresses=192.168.100.110 to-ports=
10554

If I run a port scan on port 8080, I see the packet number increment within WinBox but when I try to use the browser, it does not. The port scan indicates that port 8080 is open.

What am I missing here? Thanks in advance for helping me out.

on your dst nat try add

dst-address=public ip dst-address-type=local

remove in interface.

Thanks for the reply. I tried making the suggested changes in WinBox but not sure if I did it right and it didn’t seem to help.

Is it just my impression, or we’re talking about external port scan, but local browser (from same LAN as DVR)? If so, the info you’re looking for is in this nice tutorial.

I found a forum link that states that in addition to the DST-NAT firewall rule, a Firewall Filter with Accept also needs to be in place. I checked and I had one but it was disabled. Used the following code and it’s now working.

/ip firewall filter add action=accept chain=forward connection-nat-state=dstnat

Thanks to all who replied!