Hi,
So I'm new to Mikrotik but not our realm. Long story short I've ran into a bit of an issue with a CCR1009.

I run a network with SoftEther Nodes in it. I have a customer who can use any kind of DDWRT router, or Nighthawk X6 with factory firmware, forward ports 443,992,1194,5555 to an internal ip of 10.0.5.1 (the softether address) and it seems to work fine.

When running the CCR1009 it does not when trying to forward using the following.

0 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=5555
protocol=tcp in-interface-list=WAN dst-port=5555 log=no log-prefix=""

1 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=1194
protocol=tcp in-interface-list=WAN dst-port=1194 log=no log-prefix=""

2 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=443 protocol=tc>
in-interface-list=WAN dst-port=443 log=no log-prefix=""

3 chain=dstnat action=dst-nat to-addresses=10.0.5.1 to-ports=992 protocol=tc>
in-interface-list=WAN dst-port=992 log=no log-prefix=""

SoftEther is listening default on these ports. Is there perhaps something I'm missing that I need to try to get this working? The other end keeps reporting a protocol 2 error but isn't really in depth about it and it seems like I see a lot of connection timeouts on this end from the other end.

You can also add rules to firewall filter and add masquerade rules

Provide an anonymized config export.

Oddly enough I got this working using the mikrotik app for android and basic port forwards.
I would like to see an add in pack for Router OS running softether. It's pretty amazing just how powerful this package is. I also was going to try zero tier but for the life of me can't find it for the CCR1009 or the LTE device.

I have considered SSTP and IPoEther but I only have 1 public IP and the other is behind a hotspot.