MikroTik

I am fairly new to RouterOS and just purchased a hAP AC for my home network. I set it up largely with autoconfig; the wireless networks and guest network seem to be working fine and I have connectivity out.

My problem is that I have been unable to get port forwarding from outside to work, whether that be manually according to the YouTube tutorial or automatically using uPnP. I suspect that I am having a filter issue, but I don't know enough about the filter rules and their hierarchy to figure that out.

Another complication is that I am using a static IP; a block of 5 static IPs, actually, on a /29 subnet. What I would like to do is to use the base IP for the mail server and admin interface (i.e., forward those ports to it), and use the other four for the various web sites that I will be self-hosting on my server. So I would be forwarding ports 80 and 443 on those IPs to a custom port on my server on the local subnet. I haven't yet been able to find that topic covered at a newbie level.

While I'm new to MikroTik and to commercial-grade routing in general, I do have some familiarity with DD-WRT and consumer level routers. At some point I would love to take a training class, but that's not a real possibility in the near term due to financial constraints. Pointers to information resources would be appreciated. Thanks.

Hey. Do you want using these static globally routable IPs for you servers or you want to save some addresses and do NAT from outside to your servers? In first example, its very easy and will work by simple routing. Second example you have to use "ip firewall nat" and make some destination nat chains. With routing you wiil need use "ip firewall filter" rules in order to prevent illigal access to your servers. With destination nat you will need some simple filter rules and main access will provide destination nat. What exactly you want from this?

You just posted a question where you need to setup SRC and dst mating correctly.if you post up your static range I can help you setup corrdct translations.

Sent from my SUPER using Tapatalk

At the present time I only have one physical server which I want to be globally accessible. But it's (going to be) hosting several websites, two or three of which may eventually be migrated to their own hardware on the same static IP subnet. I'd like to set it up now so that incoming traffic for those sites is redirected to ports for a virtual web host so that all I need to do when/if I install the new hardware is to change a few settings on the router.

Of course, what I need to do right now is to get the port forwarding working on the base static IP so that my email and calendar and other functionalities are accessible. I'm probably making a very simple newbie mistake, but so far I can't figure it out. Here are screenshots of my port 25 forwarding and filter rules (with drop rules temporarily disabled). And, yes, I have rebooted the router with these settings in effect and tested connectivity on all ports; all failed.
Again, help is appreciated. I'm new at this!

You just posted a question where you need to setup SRC and dst mating correctly.if you post up your static range I can help you setup corrdct translations.

Sent from my SUPER using Tapatalk

That will probably help. Here's the relevant screenshot:

hi sorry, unable to see the screenshot?