Winbox and www home page access from WAN

RouterOS Beginner Basics
1

I’ve set the www (home page) to port 8080 on my route. I can access it from the lan, but when I try
to access it from the wan. I am currently able to access the www (home page) from my LAN. When I
try to access it from the WAN, I get this (ip numbers have been changed to protect the innocent):

[rjd@gemini4 ~]$ wget 154.16.12.6:8080
–2012-11-24 08:58:06-- http://154.16.12.6:8080/
Connecting to 192.168.2.6:8080… failed: No route to host.
I know there’s a route there, because ssh access works:

[rjd@gemini4 ~]$ ssh 154.16.12.6 -ladmin

Here are the settings which I think are relevant. I’ve either missed something or done something
wrong. Can anyone help?

Thanks,
Bob

_========================================================================
[admin@MikroTik] /ip service> print
Flags: X - disabled, I - invalid

NAME PORT ADDRESS CERTIFICATE

0 telnet 23
1 ftp 21
2 www 8080 0.0.0.0/0
3 ssh 22
4 X www-ssl 443 none
5 X api 8728
6 winbox 8291


[admin@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=input action=accept protocol=icmp

1 ;;; default configuration
chain=input action=accept connection-state=established

2 ;;; default configuration
chain=input action=accept connection-state=related

3 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway

4 ;;; www
chain=input action=accept protocol=tcp dst-port=8080

5 ;;; winbox
chain=input action=accept protocol=tcp dst-port=8291_

2

While I was waiting for this message to get moderated, I found the problem.
I forgot to add the NAT entry:

I had to add rule #4 to ip firewall nat:

[admin@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade out-interface=ether1-gateway

1 chain=srcnat action=masquerade out-interface=zyx.xyz.org

2 chain=dstnat action=accept protocol=tcp dst-port=22

3 chain=dstnat action=accept protocol=tcp dst-port=8291

4 chain=dstnat action=accept protocol=tcp dst-port=8080

5 chain=dstnat action=netmap to-addresses=192.168.88.252
dst-address=192.168.2.6

6 chain=srcnat action=netmap to-addresses=192.168.2.6
src-address=192.168.2.6