I am aware that this topic has already been discussed enough here, but I cannot find my mistake.
So far I have published services such as Plex via a VPN and this has worked quite well.
I recently got a routable IP from my provider and would like to implement port forwarding without a VPN.
Open port checkers tell me that the port is open and the counters count up for these requests.
The situation is different if I enter the external IP + port directly in the browser. The requests go nowhere and the counter does not count the access either.
As I have already read several times here, port forwarding is realized via NAT. I have also added a firewall rule regarding dst-nat.
I would be really grateful for any suggestions and help.
Code: Select all
[admin@Router] /ip/firewall> export
# 2024-05-27 17:05:32 by RouterOS 7.14.3
# software id = **ELIDED**
#
# model = RB4011iGS+
# serial number = **ELIDED**
/ip firewall address-list
add address=192.168.1.0/24 comment=LAN list=LAN
/ip firewall connection tracking
set udp-timeout=10s
/ip firewall filter
add action=drop chain=input comment="WAN -> FW | Ping blockieren" in-interface=ether1 protocol=icmp
add action=accept chain=input comment="ALLG. | Aufgebaute Verbindungen erlauben" connection-nat-state="" \
connection-state=established,related
add action=accept chain=input comment="LAN -> FW | Zugriff zur Firewall" in-interface=bridge
add action=accept chain=input comment="LAN -> FW | Ping zur Firewall erlauben" in-interface=bridge \
protocol=icmp
add action=accept chain=forward comment="ALLG. | Port-Forwarding" connection-nat-state=dstnat \
in-interface-list=WAN
add action=drop chain=input comment="ALLG. | Alles ohne Verbindungsstatus blockieren" \
connection-nat-state=""
add action=accept chain=forward comment="ALLG. | Aufgebaute Verbindungen erlauben" connection-state=\
established,related
add action=accept chain=forward comment="LAN -> WAN | Internetzugriff" in-interface=bridge out-interface=\
ether1
add action=drop chain=forward comment="ALLG. | Alles andere verwerfen" connection-nat-state="" \
connection-state=""
/ip firewall nat
add action=dst-nat chain=dstnat comment="WAN -> LAN | Plex Portforwarding" dst-port=32400 in-interface=\
ether1 protocol=tcp to-addresses=192.168.1.9 to-ports=32400
add action=dst-nat chain=dstnat comment="WAN -> LAN | nginx Portforwarding" dst-port=443 in-interface=\
ether1 protocol=tcp to-addresses=192.168.1.252
add action=dst-nat chain=dstnat comment="WAN -> LAN | nginx Portforwarding" dst-port=80 in-interface=\
ether1 protocol=tcp to-addresses=192.168.1.252
add action=masquerade chain=srcnat comment="LAN -> WAN | Masquerade - Normales NAT" ipsec-policy=out,none \
out-interface-list=WAN
