Hi,
I want to access a web server that is located in my lan from anywhere using a domain.
I set my router IP address in my domain name server an an A record, so any request to that domain is now sending to my router.

I have this NAT rules:

now I have 2 problems:

• It works fine, but if I change the dst-port to 80 (and I have to do so), it doesn't work and page don't load.
• If I remove in-interface all traffics to port 80 will forward to the server, and if let it still there, I can't access my web server using the domain in local lan

I'm using RB951 and RouterOS 6.42.3

Did you intentionally mean to do port translation?
basically in your dstnat rule people will be coming to the WAN side of the router using either the public IP or a dyndns type name with destination port of 8001,
The router will push the traffic to the private IP on your LAN (your server) withLANIP of 192.168.5.10 with destination port 8010.

Both rules seem ok.
This setup is for basic external access to your server only. Internal access to the server would be by the private LANIP.

What you need to setup is something called hairpin nat which will allow the domain access from the LAN side.

Thanks for your reply.

What you need to setup is something called hairpin nat which will allow the domain access from the LAN side.

How can I setup hairpin nat with Dynamic IP address on my pppoe connection, I read This wiki page?
Also I figured out that the problem with port "80" was in my ISP

Yes that seems to be a good resource........ PLUS these ones........
https://www.steveocee.co.uk/mikrotik/ha ... nat-video/
https://www.steveocee.co.uk/mikrotik/hairpin-nat/

maybe one other
https://mum.mikrotik.com/presentations/ ... 326862.pdf