can you see anything in the config which would stop me from using winbox on an outside computer or http and connecting to the router?
dec/18/2017 21:53:52 by RouterOS 6.40.5
software id = KCT3-DJ3C
model = RouterBOARD 750UP r2
serial number = 5BBD0527C6A6
/interface bridge
add fast-forward=no name=bridge1
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN-sat-modem
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] name=ether3-Colmar poe-out=off
set [ find default-name=ether4 ] name=ether4-Inside1
set [ find default-name=ether5 ] name=ether5-OtherNet
/ip neighbor discovery
set ether1-WAN-sat-modem discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=RTR_KDish
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=HotSpot ranges=172.16.80.100-172.16.95.250
add name=PPP ranges=172.16.79.10-172.16.79.250
/ip dhcp-server
add address-pool=HotSpot authoritative=after-2sec-delay disabled=no
interface=bridge1 name=server1
/system logging action
set 1 disk-file-name=log
/interface bridge port
add bridge=bridge1 interface=ether2-master-local
add bridge=bridge1 interface=ether3-Colmar
add bridge=bridge1 interface=ether4-Inside1
/ip address
add address=172.16.80.1/20 interface=bridge1 network=172.16.80.0
add address=172.16.79.1/24 interface=bridge1 network=172.16.79.0
add address=172.16.255.51/29 interface=ether5-OtherNet network=172.16.255.48
/ip dhcp-client
add comment=“default configuration” dhcp-options=hostname,clientid disabled=
no interface=ether1-WAN-sat-modem
/ip dhcp-server network
add address=172.16.80.0/20 gateway=172.16.80.1
add address=192.168.88.0/24 comment=“default configuration” gateway=
192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
/ip firewall address-list
add address=10.0.0.0/8 list=allowed_to_router
add address=172.16.0.0/16 list=allowed_to_router
add address=103.36.147.0/24 list=allowed_to_router
add address=0.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=172.16.0.0/12 comment=RFC6890 list=not_in_internet
add address=192.168.0.0/16 comment=RFC6890 list=not_in_internet
add address=10.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=169.254.0.0/16 comment=RFC6890 list=not_in_internet
add address=127.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=224.0.0.0/4 comment=Multicast list=not_in_internet
add address=198.18.0.0/15 comment=RFC6890 list=not_in_internet
add address=192.0.0.0/24 comment=RFC6890 list=not_in_internet
add address=192.0.2.0/24 comment=RFC6890 list=not_in_internet
add address=198.51.100.0/24 comment=RFC6890 list=not_in_internet
add address=203.0.113.0/24 comment=RFC6890 list=not_in_internet
add address=100.64.0.0/10 comment=RFC6890 list=not_in_internet
add address=240.0.0.0/4 comment=RFC6890 list=not_in_internet
add address=192.88.99.0/24 comment=“6to4 relay Anycast [RFC 3068]” list=
not_in_internet
/ip firewall filter
add action=drop chain=input log-prefix=winbox___ src-address=54.227.238.230
add action=accept chain=input disabled=yes src-address=202.80.0.0/16
add action=accept chain=input disabled=yes log-prefix=WanTok__ src-address=
103.36.0.0/16
add action=accept chain=input disabled=yes dst-port=8291 log=yes log-prefix=
GPT_ protocol=tcp src-address=103.36.147.114
add action=accept chain=input disabled=yes dst-port=8291 protocol=tcp
src-address=172.16.0.0/16
add action=accept chain=input disabled=yes dst-port=8291 log=yes log-prefix=
winbox___ protocol=tcp
add action=accept chain=input disabled=yes src-address=113.11.0.0/16
add action=accept chain=forward disabled=yes src-address=10.0.0.0/8
add action=accept chain=forward disabled=yes src-address=172.16.0.0/16
add action=accept chain=input disabled=yes src-address=172.16.0.0/16
add action=accept chain=input disabled=yes protocol=udp src-port=53
add action=accept chain=input disabled=yes protocol=tcp src-port=53
add action=accept chain=input disabled=yes dst-port=53 protocol=udp
add action=accept chain=input disabled=yes dst-port=53 protocol=tcp
add action=accept chain=input comment=“default configuration”
connection-state=established,related
add action=accept chain=input src-address-list=allowed_to_router
add action=accept chain=input protocol=icmp
add action=drop chain=input log=yes log-prefix=drop
add action=drop chain=input disabled=yes in-interface=ether1-WAN-sat-modem
log=yes log-prefix=cleanup
add action=fasttrack-connection chain=forward comment=FastTrack
connection-state=established,related
add action=accept chain=forward comment=“Established, Related”
connection-state=established,related
add action=drop chain=forward comment=“Drop invalid” connection-state=invalid
log=yes log-prefix=invalid
add action=drop chain=forward comment=
“Drop tries to reach not public addresses from LAN” dst-address-list=
not_in_internet in-interface=bridge1 log=yes log-prefix=!public_from_LAN
out-interface=!bridge1
add action=drop chain=forward comment=
“Drop incoming packets that are not NATted” connection-nat-state=!dstnat
connection-state=new in-interface=ether1-WAN-sat-modem log=yes
log-prefix=!NAT
add action=drop chain=forward comment=
“Drop incoming from internet which is not public IP” in-interface=
ether1-WAN-sat-modem log=yes log-prefix=!public src-address-list=
not_in_internet
add action=drop chain=forward comment=
“Drop packets from LAN that do not have LAN IP” in-interface=bridge1 log=
yes log-prefix=LAN_!LAN src-address=!172.16.80.0/20
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration”
out-interface=ether1-WAN-sat-modem
/ip route
add distance=1 dst-address=10.0.0.0/8 gateway=172.16.255.53
add distance=1 dst-address=172.16.0.0/20 gateway=172.16.255.53
/system clock
set time-zone-name=Australia/Sydney
/system identity
set name=RTR_KDish