If you are worried with security, you might want to reconsider this: /ip upnp set enabled=yes /ip upnp interfaces add interface=ether1 type=external Ports are scanned, up to you if you want to have it logged...or not. Thank you. I disabled it, don't know why I had it in the first place. Probably so...

As a general statement, if you have an Internet facing port for very long you WILL be port scanned and have attempts on many of the common ports. You ISP will either laugh in your face, or at least laugh at you after ending the phone call if you ask them to fix that "problem". You need to...

Default firewall rule set blocks everything not explicitly allowed from WAN side (i.e. anything not DST-NATed or not allowed to hit router itself). So it would block the connections you're doing explicitly. And you'd see it works on the "drop from WAN not DST-NATed" rule statistics (not i...

Hello. Wanted to ask If my IP address is compromised. Getting a lot of calls to 61473 port (Can't tell what it is even used for) and some outputs are just straight up look like ports scans. Do I need to call my ISP and report this or I can make some firewall rules to block these kind of things? fire...

Why are LAN clients connecting to your game server from the WAN ip? If you forward ports, why are you using UPnP? By default, only outbound connections are allowed for all LAN clients in the firewall filter. NAT is setup both ways accordingly. Logically, for clients to connect from the WAN side to ...

As for the port forwarding rules, not sure how mangle will affect your config, but normally its not used for basic port forwarding, so you must have some purpose with it not communicated?? As for the hairpin source nat rule, its better not to be specific and the rule should be as follows and remove...

Hello, i'm trying to add portforward rule and hairpin nat on port 25565, but the problem is, the rules only work on minecraft but not other games. It was working before, but then i had to reset to factory settings, am i missing some option? Port is showing open from https://www.yougetsignal.com/tool...

Bump.

EDIT: If i change in interface for dst-nat rule then atleast i can see firewall capturing packets, but i can't still get connection.

Hello, new guy here. So i got mikrotik hex rb750gr3. I started from default out of box configuration. And now i'm learning my way around RouterOS, cause i was used to noob-friendly UI from simple home routers, and i can't get port forward to work. For example i'm simply trying to port forward minecr...