Yes, strange thing, but the forward 65000->80 as mentioned above is not working.

And regarding the addon in rule 3 "connection-state=established,related,new,untracked", should I delete connection-state?

....

.....

.....

# dec/30/2022 12:58:47 by RouterOS 6.49.7 # software id = ************ # # model = RB962UiGS-5HacT2HnT # serial number = ************* /interface bridge add admin-mac=XX:xx:XX:XX:XX:XX auto-mac=no comment=defconf name=bridge /interface wireless set [ find default-name=wlan1 ] band=2ghz-b/g/n channe...

Depending on how is configured your firewall you must also set: Show all your exported config, without omit anything and censore, but not delete, with *** the private data, like serial numbers, emails and public IPs. I exported the config and hided private data ****. Should I paste it here in text ...

However, the suggested solution is not working...

Not sure what you mean, I dont access the router via port forwarding and winbox nor should you using webconfig. Use a VPN then access the router.

I've said before that I basically use VPN, but I guess there's no harm in trying out a few things for learning purposes out of interest in Router OS

Yes is possible, just for test... /ip firewall nat add action=dst-nat chain=dstnat dst-address=<WAN PUBLIC IP> dst-port=65000 protocol=tcp to-ports=80 Depending on how is configured your firewall you must also set: /ip firewall filter add action=accept chain=input dst-address=<WAN PUBLIC IP> dst-po...

Simply change the web port on ip/services from 80 to 65000 but is better you access to config panel with a VPN... A simple port scan detect web services on port 65000... Yes, I usually use VPN for that. But I was just curious if it is possible to somehow forward the port instead of changing the ip/...

Hi folks,

How should the NAT rule for port forward look like, when I want to access the routers WebFig from WAN, but using e.g. 65000 as destination port (instead of 80) and then the rule should forward it to 80?

Hi folks,

How can I change the color of the LED, especially the red blinking Wi-Fi signal LED?
hAP (RB962UiGS-5HacT2HnT)

Thanks

I figured it out.
Added a new rule for accepting new, related, established, untracked, coming from interface list WAN and placed this new rule before the rule dropping everything coming not from !LAN.

OK I saw the Connection State settings:
in rule 1: related, established, untracked

Does it mean that I have to create a new rule for allowing connection state "new" packets and to put it before rule #6, which is dropping everything not from !LAN ?

I am on WebFig.

Hello guys, I am attaching here a screenshot of the firewall factory settings of new bought Mikrotik hAP. My question is why the rule blocking access from outside (rule# 6 currently disabled for testing) is taking effect although the rule allowing this is before it - at first position #1 If I enable...

Then there are some hairpin NAT type rules if the DNS method is not what is desired.
One should know if one has a fixed WANIP/static or a dynamic WANIP as that will dictate the design.

WANIP is static

Yes, thank you!

Hello guys, I bought my first Mikrotik hAP (RB962UiGS-5HacT2HnT) a week ago. I am a newbie regarding RouterOS. However I created a NAT rule for port forwarding to access internal host from the Internet and it works without problems. But I cannot access this host from the LAN using the public IP addr...