Hello,

how can I realize a firewall rule as we know it from cheap routers - there it is called port mapping or virtual servers.
I need it for runing a webserver behind my router. I want that port 80 and 443 will be forwarded from WAN to DMZ port.

With which parameters can I raise the protection of this rule?

How is this rule implemented in cheap routers?

Best Regards

Destanation NAT:
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT

If you also want to hit the same external IP from inside your local network you'll need to search on Hairpin NAT as well.

Cheap routers do it the same basic way but is hidden behind a simplistic and limited GUI.
With RoS you have to do it yourself, but have much more flexibility and can add more custom security like from what source IP's it's available, etc.

thx, it worked.