Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I recently purchased a MikroTik router, it works great! However, I haven't been able to make my web server work from outside my lan

I'll explain better:

I have two domains in my disposal, before I switched to Mikrotik, the were working perfectly and all my websites were online. Since I changed the router, every time I try to access my websites from outside my lan, my websites can't be found.

I have my websites domains associated with a dynamic dns provider, I managed to create a port forwarding rule to redirect all my incoming traffic from port 80 to my web server, and it works, but only when I'm connected to my MikroTik router.

Is there something else I have to do?

PD: I also created a static dns rule in my router with my domains to associate it to my webserver (which is behind my router)

PD2: All I want is to redirect requests from outside to my webserver...

share|improve this question
Please post /ip firewall filter and /ip firewall nat. –  lorsungcu Mar 4 at 4:48
add comment

2 Answers

Whilst this should be a simple task, there are a few things that could be getting in your way.

From your question, I would naturally assume that your WAN IP address from your ISP has been updated when you swapped to your new router. You should confirm that your current WAN IP address (your router should be able to tell you what your WAN IP is, if not, try http://www.whatismyip.com) is shown as the current address that your website's DNS A(IPv4) or AAAA(IPv6) records point to. Check this against the records setup with your dynamic DNS provider.

Depending on how recently you changed your router over, and also depending on the TTL for the DNS records in your domain, there's normally a delay in replication of your updated DNS records propagating round the internet. Short-term: try using your WAN IP and see if you can at least get to your web server through the router. If you can get something like http://your.WAN.IP.here to return some sort of response (depending on your web server setup, it may not return the content of one of your sites, but don't worry) then you know you port forwarding is functioning correctly. If this works and your DNS records are pointing to the correct IP, you may just have wait for the changes to propagate round.

share|improve this answer
add comment

According to this site devoted to MicroTik RouterOS issues, you might need to create an additional NAT for UDP only traffic.

ip firewall nat add chain=dstnat dst-address=aaa.aaa.aaa.aaa protocol=tcp dst-port=bbbb \
action=dst-nat to-addresses=xxx.xxx.xxx.xxx to-ports=yyyy
ip firewall nat add chain=dstnat dst-address=aaa.aaa.aaa.aaa protocol=udp dst-port=bbbb \
action=dst-nat to-addresses=xxx.xxx.xxx.xxx to-ports=yyyy
share|improve this answer
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.