How to port forward on MikroTik

Be it port mapping or port forwarding, it's just another name for NAT. This short video shows how to set up Network Address Translation or NAT on a MikroTik router.

[seedered]

Awesome Saint Javelin t-shirt! Thanks for support both informational and hardware. Love you guys!

[yuriylutsyshyn]

Yo have so cool t- thist, thank for wearing it ! Дякую вам за те, що ви з нами !

[mehdikhosravi]

Hello, thank you for teaching how to port forward ipv6 in Mikrotik router❤❤❤

[UlrichWessendorf]

Nice T-Shirt, very strong statement!🔨💪

[Punshr]

Rule added by quickset is wrong. It will do dst-nat to all of packets coming from wan to lan AND from lan to wan. If you will add rule to port forward tcp:80 to 192.168.88.99:80, it will break all connections from lan to wan:80. It is because of in-interface or in-interface-list is not added.

[mykyar]

Nice T-Shirt! Thanks from Ukraine! And thanks for the manual!

[Bamsepojken]

THANK YOU!,
I finally got my minecraft server to work, i have littarly spent over 10h trying to fix

[NokHerakhanza]

Saya dari indonesia terimakasih informasinya sangat membatu saya

[ChrisNicholson]

I am very "anti quickset". Opening Quickset and hitting apply on ANYTHING has broken running configurations, more than once.

Could an option be added to hide quickset in winbox?

Also... On NAT... Maybe show people how to use IP cloud to make NAT rules more specific.

[ArthursHD]

UPNP can be dangerous :) Someone printed a page on 80'000 printers because of this. There's an episode of darknet diaries about it.
So if your router, devices and software has UPNP enabled. It can open ports you don't know about and don't need to have open to the internet. Manually you can limit access from certain countries, an ISP, IP range or even a single IP address.

[GaryLaaks]

To the point and accurate. Thank you.

[hexandcube]

In case anyone is getting the "Couldn't add new port mapping - WAN port list is missing (6)" error message, here's how to fix it
In Winbox, go to Interfaces>Interface List> Click on Lists > Add a new list and call it WAN > close the Interface Lists window>then in Interface List add your WAN interface to the WAN list

[skipperbentdk]

it doesn't port forward on LAN only the WAN / static ip... wtf is up with that - i don't get it

[pavelperina]

Last time I understood this properly was when I configured firewall on Slackware Linux in 2003 or so for dial up internet and one small company using iptables.
But what I found somewhat weird on Mikrotik - I could not make it work. I used textbook example from manual. I tried to copy this rule to input and forward and nothing, not a single packet captured by rules. After tens minutes, I disconnected phone from wifi, used termux and ssh, it worked. It somehow seems like if connection comes from internal network, to WAN IP address, it's not captured. Is there a way how to fix this? Something like if destination IP from whatever interface matches IP assigned to router by DHCP then forward port 2222 to homeserver:22?

[vash]

I have a problem.
Couldn't add new port mapping - WAN port list missing
Can You help me?, please

[izwanmohd]

We dont need to add any filter rules to allow the NAT connection?

[javitech]

A question ??? I have the Clients in PPPoE mode on the Mikrotiik CCR1009-7G-1C-1S+ but I want to add a MyCloudPR4100 NAS For Movies.. OK my Question how can I Install it on the Mikrotik CCR1009-7G-1C-1S+ So that my Clients can see it ???

[emmanzki]

can i specify which ip addresses can connect on my network?

[boatpimp]

Does not work if you are on a vlan. Just set it up in the firewall settings but add "ALL VLAN" under in-interface. That's for kiwi's with Mikrotik. Love to hate it!

[Arkoss]

hi i need help i used winbox used the firewall NAT setted up tcp and udp dstnat because you need both for rust server and still it doesnt work i need help :D