Why you use 4.4.4.0/24 and 5.5.5.0/24 as yours ip address? It's not a private addresses, it is a public address.

Could you post your IP > Firewall > Filter rules?

[admin@SISC] /ip firewall> export
# may/11/2015 12:52:19 by RouterOS 6.5
# software id = LQ4R-BR8T
#
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
    disabled=yes to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=5.5.5.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=4.4.4.0/24 to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=9000 in-interface=WAN protocol=tcp \
    to-addresses=4.4.4.200 to-ports=9000
add action=dst-nat chain=dstnat dst-port=80 in-interface=WAN protocol=tcp \
    to-addresses=4.4.4.230 to-ports=80

Hy khaloudy,

what it's the purpose of the modem ? it's DSL technology ?
If so you need to set up your modem in bridge mode only then your NAT rule will work .

Please read / watch the following:

http://wiki.mikrotik.com/wiki/How_to_Co ... _xDSL_Line
http://pcservis.flimel.eu/how-to-conect ... oe-client/
http://forum.mikrotik.com/viewtopic.php?t=70480

Best Regards,

Daniel

Hi khaloudy,

first of all i will suggest you change the 4.4.4.0 class to something from private class like 10.0.0.0 - 10.255.255.255 ( http://en.wikipedia.org/wiki/Private_network).

An idea it's to set ip address ( 41.XX.XXX.182 ) to mikrotik interface .. see if you could access it from the internet .

Best Regards,

Daniel

Hi khaloudy,

could you please tell me where is DVR phisical connected ?

It's connected to modem or to mikrotik ?

Best Regards,

Daniel

Ok,

you write earlier that :

modem it's working with 2 ip as gateway

192.168.1.1 ===============> modem ip login
41.XX.XXX.181 =============> modem static ip as gateway to static and login to modem too

and:

Now you configured mikrotik 1 year ago like :

wan = 192.168.1.99/24
lan = 4.4.4.1/24 (hosts via lan)
wlan = 5.5.5.1/24 (wireless from modem)

you also noted that DVR have the following IP : 41.xx.xxx.182 and if it's connected directly to the modem can access the internet and also himself could be access it .
In this case my suggestion it's to add secondary ip on wan interface of the mikrotik ( you can secondary ip from another network ) as the following:

wan = 192.168.1.99/24
wan = 41.xx.xxx.182/mask ( as secondary ip ) - also don't forget to add static default route to 41.xx.xxx.181 ( in this case you will have two default routes )
lan = 4.4.4.1/24 (hosts via lan)
wlan = 5.5.5.1/24 (wireless from modem)

connect the DVR to mikrotik LAN interfaces and change ip address of the DVR to one of the lan host ( 4.4.4.199/24)
At the end write the correct nat rule to be able to be access from outside where destination ip should be 41.xx.xxx.182 to nat ip ( in this case ) 4.4.4.199

Best Regards,

Daniel