Mikrotik - How to open a port?












4















I have recently bought a Mikrotik hAP ac^2 and I am trying to figure out how to connect to my NUC QBittorrent from "outside". This is all new to me...



My ISP has bridged its router and I connected my new Mikrotik to it and configured some basic things like WiFi.



I found my public DNS name: XXXXXXXXcd.sn.mynetname.net.



These are my settings:



/ip firewall export
# dec/26/2018 15:12:03 by RouterOS 6.43.4
# software id = EBLA-R903
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXXX
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=drop chain=input in-interface=ether1
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat comment="QBitTorrent Web UI" dst-port=8100 in-interface=ether1 protocol=tcp to-addresses=192.168.88.239 to-ports=8100


My NUC is 192.168.88.239. When I try to connect to XXXXXXXXXcd.sn.mynetname.net:8100 my connection is Unable to connect. I figured out I should be using ether1 because I connected my bridged router to it and confirmed it by unplugging and checking the state in Interfaces tab of my Mikrotik...



What am I doing wrong?










share|improve this question

























  • Are you connecting from inside of the LAN, or from the outside?

    – grawity
    Dec 27 '18 at 18:29
















4















I have recently bought a Mikrotik hAP ac^2 and I am trying to figure out how to connect to my NUC QBittorrent from "outside". This is all new to me...



My ISP has bridged its router and I connected my new Mikrotik to it and configured some basic things like WiFi.



I found my public DNS name: XXXXXXXXcd.sn.mynetname.net.



These are my settings:



/ip firewall export
# dec/26/2018 15:12:03 by RouterOS 6.43.4
# software id = EBLA-R903
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXXX
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=drop chain=input in-interface=ether1
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat comment="QBitTorrent Web UI" dst-port=8100 in-interface=ether1 protocol=tcp to-addresses=192.168.88.239 to-ports=8100


My NUC is 192.168.88.239. When I try to connect to XXXXXXXXXcd.sn.mynetname.net:8100 my connection is Unable to connect. I figured out I should be using ether1 because I connected my bridged router to it and confirmed it by unplugging and checking the state in Interfaces tab of my Mikrotik...



What am I doing wrong?










share|improve this question

























  • Are you connecting from inside of the LAN, or from the outside?

    – grawity
    Dec 27 '18 at 18:29














4












4








4








I have recently bought a Mikrotik hAP ac^2 and I am trying to figure out how to connect to my NUC QBittorrent from "outside". This is all new to me...



My ISP has bridged its router and I connected my new Mikrotik to it and configured some basic things like WiFi.



I found my public DNS name: XXXXXXXXcd.sn.mynetname.net.



These are my settings:



/ip firewall export
# dec/26/2018 15:12:03 by RouterOS 6.43.4
# software id = EBLA-R903
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXXX
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=drop chain=input in-interface=ether1
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat comment="QBitTorrent Web UI" dst-port=8100 in-interface=ether1 protocol=tcp to-addresses=192.168.88.239 to-ports=8100


My NUC is 192.168.88.239. When I try to connect to XXXXXXXXXcd.sn.mynetname.net:8100 my connection is Unable to connect. I figured out I should be using ether1 because I connected my bridged router to it and confirmed it by unplugging and checking the state in Interfaces tab of my Mikrotik...



What am I doing wrong?










share|improve this question
















I have recently bought a Mikrotik hAP ac^2 and I am trying to figure out how to connect to my NUC QBittorrent from "outside". This is all new to me...



My ISP has bridged its router and I connected my new Mikrotik to it and configured some basic things like WiFi.



I found my public DNS name: XXXXXXXXcd.sn.mynetname.net.



These are my settings:



/ip firewall export
# dec/26/2018 15:12:03 by RouterOS 6.43.4
# software id = EBLA-R903
#
# model = RBD52G-5HacD2HnD
# serial number = XXXXXXXXXX
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=forward connection-state=established,related
add action=drop chain=input in-interface=ether1
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat comment="QBitTorrent Web UI" dst-port=8100 in-interface=ether1 protocol=tcp to-addresses=192.168.88.239 to-ports=8100


My NUC is 192.168.88.239. When I try to connect to XXXXXXXXXcd.sn.mynetname.net:8100 my connection is Unable to connect. I figured out I should be using ether1 because I connected my bridged router to it and confirmed it by unplugging and checking the state in Interfaces tab of my Mikrotik...



What am I doing wrong?







networking router firewall






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Jan 3 at 11:43









mTorres

149113




149113










asked Dec 27 '18 at 18:17









alturkovicalturkovic

387




387













  • Are you connecting from inside of the LAN, or from the outside?

    – grawity
    Dec 27 '18 at 18:29



















  • Are you connecting from inside of the LAN, or from the outside?

    – grawity
    Dec 27 '18 at 18:29

















Are you connecting from inside of the LAN, or from the outside?

– grawity
Dec 27 '18 at 18:29





Are you connecting from inside of the LAN, or from the outside?

– grawity
Dec 27 '18 at 18:29










2 Answers
2






active

oldest

votes


















1





+50









It seems to me that you're trying to connect from inside the LAN to your public facing interface XXXXXXcd.sn.mynetname.net (which resolves to a public IP).



You simply can't. Well, you can if your router is able to and you configure it, but this is a waste of resources, I see it more like a hack thant a feature. You should always use the private IP when connecting from inside your LAN.



What I do at home is have a private DNS server which resolves my public domain to a private IP, in your case your DNS server should resolve XXXXXXXcd.sn.mynetname.net to 192.168.88.239 (otherwise use your private IP instead of your domain)



Oh, and in case you are wondering, your configuration is OK. I can publicly connect to your port 8100 (using TPC and UDP):



$ nmap -sU -P0 -p8100 XXXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up.

PORT STATE SERVICE
8100/udp open|filtered xprint-server

Nmap done: 1 IP address (1 host up) scanned in 8.60 seconds

$ nmap -sT -P0 -p8100 XXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up (0.057s latency).

PORT STATE SERVICE
8100/tcp open xprint-server

Nmap done: 1 IP address (1 host up) scanned in 6.63 seconds


NOTICE: I've edited your question and my answer to anonimize your public IP






share|improve this answer


























  • Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

    – alturkovic
    Jan 3 at 11:45











  • Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

    – mTorres
    Jan 3 at 11:46











  • There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

    – alturkovic
    Jan 3 at 11:49






  • 1





    Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

    – mTorres
    Jan 3 at 11:50



















0














You probably need to forward the port on the isp’s router and possibly yours. I can’t tell you the specific instructions for the isp router, but if you search ‘port forward ’ then that should give you some answers.






share|improve this answer
























  • My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

    – alturkovic
    Jan 2 at 11:19











  • It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

    – dExIT
    Jan 3 at 7:28











  • ISP router is bridged as I already said...

    – alturkovic
    Jan 3 at 10:46











  • You may need to setup a dmz between the 2 routers.

    – JCA122204
    Jan 4 at 20:21











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388195%2fmikrotik-how-to-open-a-port%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes









1





+50









It seems to me that you're trying to connect from inside the LAN to your public facing interface XXXXXXcd.sn.mynetname.net (which resolves to a public IP).



You simply can't. Well, you can if your router is able to and you configure it, but this is a waste of resources, I see it more like a hack thant a feature. You should always use the private IP when connecting from inside your LAN.



What I do at home is have a private DNS server which resolves my public domain to a private IP, in your case your DNS server should resolve XXXXXXXcd.sn.mynetname.net to 192.168.88.239 (otherwise use your private IP instead of your domain)



Oh, and in case you are wondering, your configuration is OK. I can publicly connect to your port 8100 (using TPC and UDP):



$ nmap -sU -P0 -p8100 XXXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up.

PORT STATE SERVICE
8100/udp open|filtered xprint-server

Nmap done: 1 IP address (1 host up) scanned in 8.60 seconds

$ nmap -sT -P0 -p8100 XXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up (0.057s latency).

PORT STATE SERVICE
8100/tcp open xprint-server

Nmap done: 1 IP address (1 host up) scanned in 6.63 seconds


NOTICE: I've edited your question and my answer to anonimize your public IP






share|improve this answer


























  • Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

    – alturkovic
    Jan 3 at 11:45











  • Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

    – mTorres
    Jan 3 at 11:46











  • There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

    – alturkovic
    Jan 3 at 11:49






  • 1





    Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

    – mTorres
    Jan 3 at 11:50
















1





+50









It seems to me that you're trying to connect from inside the LAN to your public facing interface XXXXXXcd.sn.mynetname.net (which resolves to a public IP).



You simply can't. Well, you can if your router is able to and you configure it, but this is a waste of resources, I see it more like a hack thant a feature. You should always use the private IP when connecting from inside your LAN.



What I do at home is have a private DNS server which resolves my public domain to a private IP, in your case your DNS server should resolve XXXXXXXcd.sn.mynetname.net to 192.168.88.239 (otherwise use your private IP instead of your domain)



Oh, and in case you are wondering, your configuration is OK. I can publicly connect to your port 8100 (using TPC and UDP):



$ nmap -sU -P0 -p8100 XXXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up.

PORT STATE SERVICE
8100/udp open|filtered xprint-server

Nmap done: 1 IP address (1 host up) scanned in 8.60 seconds

$ nmap -sT -P0 -p8100 XXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up (0.057s latency).

PORT STATE SERVICE
8100/tcp open xprint-server

Nmap done: 1 IP address (1 host up) scanned in 6.63 seconds


NOTICE: I've edited your question and my answer to anonimize your public IP






share|improve this answer


























  • Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

    – alturkovic
    Jan 3 at 11:45











  • Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

    – mTorres
    Jan 3 at 11:46











  • There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

    – alturkovic
    Jan 3 at 11:49






  • 1





    Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

    – mTorres
    Jan 3 at 11:50














1





+50







1





+50



1




+50





It seems to me that you're trying to connect from inside the LAN to your public facing interface XXXXXXcd.sn.mynetname.net (which resolves to a public IP).



You simply can't. Well, you can if your router is able to and you configure it, but this is a waste of resources, I see it more like a hack thant a feature. You should always use the private IP when connecting from inside your LAN.



What I do at home is have a private DNS server which resolves my public domain to a private IP, in your case your DNS server should resolve XXXXXXXcd.sn.mynetname.net to 192.168.88.239 (otherwise use your private IP instead of your domain)



Oh, and in case you are wondering, your configuration is OK. I can publicly connect to your port 8100 (using TPC and UDP):



$ nmap -sU -P0 -p8100 XXXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up.

PORT STATE SERVICE
8100/udp open|filtered xprint-server

Nmap done: 1 IP address (1 host up) scanned in 8.60 seconds

$ nmap -sT -P0 -p8100 XXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up (0.057s latency).

PORT STATE SERVICE
8100/tcp open xprint-server

Nmap done: 1 IP address (1 host up) scanned in 6.63 seconds


NOTICE: I've edited your question and my answer to anonimize your public IP






share|improve this answer















It seems to me that you're trying to connect from inside the LAN to your public facing interface XXXXXXcd.sn.mynetname.net (which resolves to a public IP).



You simply can't. Well, you can if your router is able to and you configure it, but this is a waste of resources, I see it more like a hack thant a feature. You should always use the private IP when connecting from inside your LAN.



What I do at home is have a private DNS server which resolves my public domain to a private IP, in your case your DNS server should resolve XXXXXXXcd.sn.mynetname.net to 192.168.88.239 (otherwise use your private IP instead of your domain)



Oh, and in case you are wondering, your configuration is OK. I can publicly connect to your port 8100 (using TPC and UDP):



$ nmap -sU -P0 -p8100 XXXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up.

PORT STATE SERVICE
8100/udp open|filtered xprint-server

Nmap done: 1 IP address (1 host up) scanned in 8.60 seconds

$ nmap -sT -P0 -p8100 XXXXXXcd.sn.mynetname.net
Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-03 12:24 CET
Nmap scan report for XXXXXXcd.sn.mynetname.net (188.252.X.X)
Host is up (0.057s latency).

PORT STATE SERVICE
8100/tcp open xprint-server

Nmap done: 1 IP address (1 host up) scanned in 6.63 seconds


NOTICE: I've edited your question and my answer to anonimize your public IP







share|improve this answer














share|improve this answer



share|improve this answer








edited Jan 3 at 11:45

























answered Jan 3 at 11:27









mTorresmTorres

149113




149113













  • Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

    – alturkovic
    Jan 3 at 11:45











  • Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

    – mTorres
    Jan 3 at 11:46











  • There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

    – alturkovic
    Jan 3 at 11:49






  • 1





    Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

    – mTorres
    Jan 3 at 11:50



















  • Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

    – alturkovic
    Jan 3 at 11:45











  • Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

    – mTorres
    Jan 3 at 11:46











  • There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

    – alturkovic
    Jan 3 at 11:49






  • 1





    Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

    – mTorres
    Jan 3 at 11:50

















Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

– alturkovic
Jan 3 at 11:45





Exactly what I was asking, thank you! And thanks for the advice, I realized it a bit late :) Firewall should do its job :)

– alturkovic
Jan 3 at 11:45













Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

– mTorres
Jan 3 at 11:46





Oh, by the way, if you feel that my answer solved your problem, you should mark it as accepted by clicking the thick icon below the arrows on top-right of the answer. Cheers :-)

– mTorres
Jan 3 at 11:46













There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

– alturkovic
Jan 3 at 11:49





There is a bounty for 2 more days, I'll wait to see if this question receives any more attention before I accept, don't worry :)

– alturkovic
Jan 3 at 11:49




1




1





Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

– mTorres
Jan 3 at 11:50





Ok, I really didn't notice that! Comming from stackoverflow, most novices do not realize they have to accept the answer, sorry!

– mTorres
Jan 3 at 11:50













0














You probably need to forward the port on the isp’s router and possibly yours. I can’t tell you the specific instructions for the isp router, but if you search ‘port forward ’ then that should give you some answers.






share|improve this answer
























  • My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

    – alturkovic
    Jan 2 at 11:19











  • It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

    – dExIT
    Jan 3 at 7:28











  • ISP router is bridged as I already said...

    – alturkovic
    Jan 3 at 10:46











  • You may need to setup a dmz between the 2 routers.

    – JCA122204
    Jan 4 at 20:21
















0














You probably need to forward the port on the isp’s router and possibly yours. I can’t tell you the specific instructions for the isp router, but if you search ‘port forward ’ then that should give you some answers.






share|improve this answer
























  • My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

    – alturkovic
    Jan 2 at 11:19











  • It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

    – dExIT
    Jan 3 at 7:28











  • ISP router is bridged as I already said...

    – alturkovic
    Jan 3 at 10:46











  • You may need to setup a dmz between the 2 routers.

    – JCA122204
    Jan 4 at 20:21














0












0








0







You probably need to forward the port on the isp’s router and possibly yours. I can’t tell you the specific instructions for the isp router, but if you search ‘port forward ’ then that should give you some answers.






share|improve this answer













You probably need to forward the port on the isp’s router and possibly yours. I can’t tell you the specific instructions for the isp router, but if you search ‘port forward ’ then that should give you some answers.







share|improve this answer












share|improve this answer



share|improve this answer










answered Jan 2 at 9:34









JCA122204JCA122204

316




316













  • My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

    – alturkovic
    Jan 2 at 11:19











  • It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

    – dExIT
    Jan 3 at 7:28











  • ISP router is bridged as I already said...

    – alturkovic
    Jan 3 at 10:46











  • You may need to setup a dmz between the 2 routers.

    – JCA122204
    Jan 4 at 20:21



















  • My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

    – alturkovic
    Jan 2 at 11:19











  • It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

    – dExIT
    Jan 3 at 7:28











  • ISP router is bridged as I already said...

    – alturkovic
    Jan 3 at 10:46











  • You may need to setup a dmz between the 2 routers.

    – JCA122204
    Jan 4 at 20:21

















My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

– alturkovic
Jan 2 at 11:19





My ISP router is in bridge mode, so I am doubtful about that. I tried connecting via mynetname and I can see some incoming traffic on my router, but I think it is getting dropped and cannot figure out why.

– alturkovic
Jan 2 at 11:19













It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

– dExIT
Jan 3 at 7:28





It is called PORT FORWARDING on outside facing router, that points to a Internal IP and PORT to allow passthrough same as IPtables jsut via GUI usually.

– dExIT
Jan 3 at 7:28













ISP router is bridged as I already said...

– alturkovic
Jan 3 at 10:46





ISP router is bridged as I already said...

– alturkovic
Jan 3 at 10:46













You may need to setup a dmz between the 2 routers.

– JCA122204
Jan 4 at 20:21





You may need to setup a dmz between the 2 routers.

– JCA122204
Jan 4 at 20:21


















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388195%2fmikrotik-how-to-open-a-port%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

"Incorrect syntax near the keyword 'ON'. (on update cascade, on delete cascade,)

Alcedinidae

RAC Tourist Trophy