Hello, folks! I’ve been trying to access my router from Internet using port forwarding, but it doesn’t work somehow.
I basically created a NAT rule with destination address to be my public IP address, 6 (tcp) protocol, dst. port to be 8291. Then in the action tab I chose dst-nat action and address of my router (All I want is to show the website of login, so I can login to my router from anywhere in the world), to port is 80.
After creating this NAT rule, I headed to Filter Rules and created one with chain=input, protocol=6(tcp), dst-port=8291, In. interface=all ethernet, action=accept (in action tab).
PROBLEM: I’m able to access the router using PUBLIC_IP:8291 .. but when I’m in the different network and try it from different device, it just keeps loading and loading and nothing happens.
I would be so glad if someone helped me out of this. Thank you in advance
Just don’t do that! Winbox port opened to internet is just asking for trouble. Setup a VPN on that router or at least setup an access list and only allow Winbox access from that list, not the whole internet.
Of course, thanks. I won’t do it now.. but if I want to open port 25565, for example, so people can connect to my minecraft server, let’s say.. then what am I supposed to do? People won’t be able to connect the server.. because if they can’t access my router from outside.. why should it work for mc? What am I supposed to do to get this working?
Input = connection made directly to the router
Forward = connections made through the router
Winbox is Input (running on router)
Minecraft is Forward (running on a machine behind the router)
To allow connections for your Winbox port you need an Allow rule under Filter Rules tab
To allow connections for your Minecraft port/server you need dst-nat rule under NAT tab and an Allow rule under Filter Rules tab
You look like a very fresh user of Mikrotik. Welcome.
But please take a look at the wiki which has lots of useful information about this topic if you want to stay secure and learn the basics about RouterOS.