Hello to the Mikrotik community.
This is my first Mikrotik device it is a L009UiGS that replaces my Edgerouter X.
So I did a fundamental setup to check if I could get port forwarding working. So, yes I did use the router quick start which from reading is rather advised against but at least it gives me a basic config to start with so it did its job. So I setup a hairpin nat which works just fine TCP port forwarding is working then I went to test UDP and nothing. This was done by having a friend try to connect to Teamspeak using port 9877. He is unable to connect so double-checked and had him connect to my web server which host foundry he can see just fine.
This was the TCP test had to ask my friend to check it via discord.
So now I am attaching the config and hoping I just having an idiot moment and just overlooking something. Before asking if I am sure the isp not blocking the port I checked with my edgerouter X and it works just fine so no the ports are not blocked.
So in advance thanks for any and all help now to the config.
# 2023-10-14 21:47:24 by RouterOS 7.11.2
# software id = 4QXF-MFEN
#
# model = L009UiGS
# serial number =
/interface bridge
add admin-mac=78:9A:18:5E:E9:5D auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] name="ether1 -Wan"
set [ find default-name=ether2 ] name="ether2 -Lan"
set [ find default-name=ether3 ] name="ether3 - Lan"
set [ find default-name=ether4 ] name="ether4 - Lan"
set [ find default-name=ether5 ] name="ether5 - Lan"
set [ find default-name=ether6 ] name="ether6 - Lan"
set [ find default-name=ether7 ] name="ether7 - Lan"
set [ find default-name=ether8 ] name="ether8 - Lan"
set [ find default-name=sfp1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,2500M-full \
name="sfp1 -Lan Server connection"
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=defconf
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge comment=defconf interface="ether2 -Lan"
add bridge=bridge comment=defconf interface="ether3 - Lan"
add bridge=bridge comment=defconf interface="ether4 - Lan"
add bridge=bridge comment=defconf interface="ether5 - Lan"
add bridge=bridge comment=defconf interface="ether6 - Lan"
add bridge=bridge comment=defconf interface="ether7 - Lan"
add bridge=bridge comment=defconf interface="ether8 - Lan"
add bridge=bridge comment=defconf interface="sfp1 -Lan Server connection"
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface="ether1 -Wan" list=WAN
/ip address
add address=192.168.1.1/24 comment=defconf interface=bridge network=\
192.168.1.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add comment=defconf interface="ether1 -Wan"
/ip dhcp-server network
add address=192.168.1.0/24 comment=defconf dns-server=192.168.1.1 gateway=\
192.168.1.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.1.1 comment=defconf name=router.lan
/ip firewall address-list
add address=Static-ip list=Wan-IP
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=accept chain=forward comment="Allow dst-nat connections from Wan" \
connection-nat-state=dstnat connection-state=established,related \
connection-type="" in-interface-list=WAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="hairpin nat" dst-address=\
192.168.1.0/24 src-address=192.168.1.0/24
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN src-address=192.168.1.0/24
add action=dst-nat chain=dstnat comment="Teamspeak 3" dst-address=\
Static-ip dst-port=9877 protocol=udp to-addresses=192.168.1.82 \
to-ports=9877
add action=dst-nat chain=dstnat comment="Teamspeak 3" dst-address=\
Static-ip dst-port=10011 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="Teamspeak 3" dst-address=\
Static-ip dst-port=30033 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die" dst-address=\
Static-ip dst-port=8080 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die" dst-address=\
Static-ip dst-port=8081 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die" dst-address=\
Static-ip dst-port=26900 protocol=udp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die" dst-address=\
Static-ip dst-port=26900 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die " dst-address=\
Static-ip dst-port=26901 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="7 days to die " dst-address=\
Static-ip dst-port=26901 protocol=udp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=Icarus dst-address=Static-ip \
dst-port=17777 protocol=udp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=Satifactory dst-address=Static-ip \
dst-port=15777 protocol=udp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=Satifactory dst-address=Static-ip \
dst-port=15000 protocol=udp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-address=\
Static-ip dst-port=7777 protocol=tcp src-address-list="" \
to-addresses=192.168.1.82 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-address=\
Static-ip dst-port=7777 protocol=udp src-address-list="" \
to-addresses=192.168.1.82 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-address=\
Static-ip dst-port=27015 protocol=tcp to-addresses=192.168.1.82 \
to-ports=27015
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-address=\
Static-ip dst-port=27015 protocol=udp to-addresses=192.168.1.82 \
to-ports=27015
add action=dst-nat chain=dstnat comment="conan exiles" dst-address=\
Static-ip dst-port=7778 protocol=udp to-addresses=192.168.1.82 \
to-ports=7778
add action=dst-nat chain=dstnat comment="conan exiles" dst-address=\
Static-ip dst-port=27036 protocol=tcp to-addresses=192.168.0.82 \
to-ports=27036
add action=dst-nat chain=dstnat comment="conan exiles" dst-address=\
Static-ip dst-port=27036 protocol=udp to-addresses=192.168.0.82 \
to-ports=27036
add action=dst-nat chain=dstnat comment=http dst-address=Static-ip \
dst-port=80 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=https dst-address=Static-ip \
dst-port=443 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=foundry dst-address=Static-ip \
dst-port=30000 protocol=tcp to-addresses=192.168.1.82
add action=dst-nat chain=dstnat comment=nginx dst-address=Static-ip \
dst-port=1935 protocol=tcp to-addresses=192.168.1.82
/ip upnp interfaces
add interface=bridge type=internal
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=\
33434-33534 protocol=udp
add action=accept chain=input comment=\
"defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=input comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
add action=accept chain=forward comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
"defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
ipsec-esp
add action=accept chain=forward comment=\
"defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
"defconf: drop everything else not coming from LAN" in-interface-list=\
!LAN
/system clock
set time-zone-name=America/Los_Angeles
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool sniffer
set streaming-server=192.168.1.82:9877
Nevermind solved it was me merely not using my eyes… 9987 not 9887 sighs at self.