Hello,
Tonight I wanted to set up DMZ on my Mikrotik router, I found on the internet this command:

/ip fi n a ch=dstnat pr=tcp dst-p=1-65535 ac=dst-nat to-a=192.168.1.131 to-p=1-65535

(192.168.1.131 is IP address of my PC)

I run this command in the terminal and from that moment my internet does not work and I can not connect to the Mikrotik using Winbox (from any device).
Does anyone know how to fix it without reset to factory settings.

Thanks

Hello,
Tonight I wanted to set up DMZ on my Mikrotik router, I found on the internet this command:

/ip fi n a ch=dstnat pr=tcp dst-p=1-65535 ac=dst-nat to-a=192.168.1.131 to-p=1-65535

(192.168.1.131 is IP address of my PC)

I run this command in the terminal and from that moment my internet does not work and I can not connect to the Mikrotik using Winbox (from any device).
Does anyone know how to fix it without reset to factory settings.

Thanks

You have 2 options for this case, reset to factory settings (Netinstall) or access by L2 with Winbox.

You have added the next rule:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=1-65535 action=dst-nat to-addresses=192.168.1.131 to-ports=1-65535

Whit this rule all traffic that goes through your router it's being redirected to 192.168.1.131. You should have added a rule that accept at least the administrative traffic for router and specify in-interface=wan.

Good Luck!

As you can see, Mikrotik values are pretty aggressive. So, what’s the catch? What does Mikrotik know and others don't?
????