TikTool doesn't work - Please help ;)

RouterOS Beginner Basics
1

Hi to all,
I have an issue with TikTool because I can’t use it if I’m not on my home wifi.

If I’m connected at home to my RB951G-2HnD it’s working fine.

I’m exporting config of my FW below:

/ip firewall filter
add chain=input comment="Accept TikTool" dst-port=8728 protocol=tcp
add chain=input comment="Accept WebFig" dst-port=80 protocol=tcp
add chain=input comment="Accept WinBox" dst-port=8291 protocol=tcp
add action=drop chain=forward comment="Block Privat-Public communications" \ dst-address=192.168.17.0/24 protocol=tcp src-address=10.0.0.0/24
add action=drop chain=forward comment="Block Public-Privat communications" \ dst-address=10.0.0.0/24 protocol=tcp src-address=192.168.17.0/24
add action=drop chain=input comment="DROP ALL" in-interface=ether1

/ip firewall nat
add action=dst-nat chain=dstnat comment="MikroTik TikTool Access" dst-address=\ PUBLIC-IP dst-port=8728 protocol=tcp to-addresses=10.0.0.1 to-ports=\ 8728
add action=dst-nat chain=dstnat comment="MikroTik WebFig Access" dst-address=\ PUBLIC-IP dst-port=80 protocol=tcp to-addresses=10.0.0.1 to-ports=80
add action=dst-nat chain=dstnat comment="MikroTik WinBox Access" dst-address=\ PUBLIC-IP dst-port=8291 protocol=tcp to-addresses=10.0.0.1 to-ports=\ 8291
add action=dst-nat chain=dstnat comment="D-Link DNS-325 Web Access" dst-address=\ PUBLIC-IP dst-port=88 protocol=tcp to-addresses=10.0.0.240 to-ports=80
add action=dst-nat chain=dstnat comment="D-Link DNS-325 FTP Access" dst-address=\ PUBLIC-IP dst-port=21 protocol=tcp to-addresses=10.0.0.240 to-ports=21
add action=src-nat chain=srcnat comment="Privat SRC-NAT" src-address=10.0.0.0/24 \ to-addresses=PUBLIC-IP
add action=dst-nat chain=dstnat comment="Privat DST-NAT" dst-address=\ PUBLIC-IP to-addresses=10.0.0.0/24
add action=src-nat chain=srcnat comment="Public SRC-NAT" src-address=\ 192.168.17.0/24 to-addresses=PUBLIC-IP
add action=dst-nat chain=dstnat comment="Public DST-NAT" dst-address=\ PUBLIC-IP to-addresses=192.168.17.0/24
add action=masquerade chain=srcnat comment="TusMobil Internet Masquerade" \ out-interface=ether1

I’m confused because I have exactly the same config for WebFig, WinBox and TikTool but TikTool doesn’t work at all.

Can someone please help me?

2

I have the same issue.
I cannot access the winboc remotely from my office
But when I use Winbox, I can connect to any WAN IP of the winbox from any where in the world
But with tiktool, only it is working when connected in the LAN
Please help me to use tiktool from any where in the world reotely

3

Hi,

Check if the api service is enabled: ip service print
to enable: ip service enable api

4

Setup a hairpin nat rule.

5

Please help me to setup this hairpin nat rule
I can access WAN IP of router from any where with winbox
but cannot access from tiktool
please help me in detail if possible
Thanks in advance

6

What is a TikTool?

7

Hi Tzupan,

Try:

/ip firewall filter

add chain=input comment="Accept Tiktool" dst-port=8728 protocol=tcp

Please let me know if this works.

Don James

8

winbox for IOS

http://www.tiktool.com

I use it its very nice, not to stable though

I noticed the iCloud sync for you sites list is much better now with the newest version then before