Can you elaborate, and post what you did to fix? I have also been troubleshooting intermittent connectivity issues with hairpin enabled...and it's been to a ubuntu server thus far (running different servers on unique ports). Was thinking it was hairpin, then fasttrack issue. Neither have panned out...

Thanks to all of you!
I think i'm nailed down the issue to my Ubuntu server not responding to SYN tcp packets...
Not a Mikrotik related issue... just bad network configuration on my Ubuntu server...
Thank you again!

Ok, you are right here is tcpdump from the host(ubuntu 14.04)... # tcpdump -i eth1 tcp port 80 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes 20:50:47.556804 IP 167.114.118.4.56608 > 192.168.88.2....

I've enabled logging on filtering rule(that allows all port-forwarding) and port-forwarding itsef with web-filter and web-nat respectively. Here is logs: https://dl.dropboxusercontent.com/u/25764421/Screenshot_58.png here is my firewall rules: [admin@MikroTik] > /ip firewall export # oct/31/2016 22:...

No, that was probably because you were testing it from LAN and port forwarding doesn't work from there by default. By removing out-interface from masquerade rule, you created variant of hairpin NAT . Your last rules should work. If not, it's either blocked by target machine (make sure it allows con...

Add interface & try to access from WAN.

Now its not working completely... not from WAN, nor from LAN...

You also need to add second rule if you want to get access from outside of your network. Sorry, I don't understand you... my current rules: add action=masquerade chain=srcnat comment="default configuration" src-address=192.168.88.0/24 add action=dst-nat chain=dstnat dst-address=109.251.71...

Change to masquerade rule fixed part of the problem... Now when i try to visit this port from inside i'm getting port-forwarded. But It's not working from outside (WAN)! add action=masquerade chain=srcnat src-address=192.168.88.0/24 If you could explain why "Quick Set" generated masquerade...

It'll be good to see your actual rule from /ip firewall nat export to really help you - often enough to-address is confused with dst-address. -Chris [admin@MikroTik] > /ip firewall nat export # oct/31/2016 18:59:40 by RouterOS 6.37.1 # software id = X4W2-RPHY # /ip firewall nat add action=masquerad...

Can't get my port-forwarding working. I'm doing it as described in many tutorials: added dst-nat action to dst-nat chain but it's not working. I guess i have to fix some filtering rules: i have tried to disable all drop actions with no luck... So if i have clean RouterOS with WAN static IP on the et...