Sun Dec 11, 2022 1:23 pm
If you're trying to use ROS device as SMB server, then use dst-nat with to-addresses unset, only to-ports ... If you're trying to expose LAN SMB server via non-standard port, then usual dst-nat (with non-standard dst-port) should do.
Either way, exposing SMB to internet directly (without tight control over src-address) is not a very good idea. It would be much better to require to use some good VPN tunnel ...