Port forarding on Mikrotik Router OS

AllStarLink
1

Does anyone use Mikrotik routers with Allstar?

Fiber ISP with Static IP address, not blocking ports. I had it working with a OPNSense router before I updated and created multiple issues so I know the connection works

Router is a RB-450Gx2 with Router OS ver 7.23.3

I have setup the DST-dat for UDP port 4570 (correct port) as plan to move this node to a site where there is another node. Then a firewall rule to forward udp 4570 from WAN interface to accept

Parrot Node 2002 shows node is reachable

Any ideas?

Thanks
Jerry

2

I have tons of it behind Mikrotik. Very common in the amateur world.

Make sure that your rule is in the forward chain and that it's specifically permitting the destination NAT:

39    ;;; -----===== ASL Sever 460181 =====-----
      chain=forward action=accept protocol=udp dst-address=172.17.16.136 dst-port=4570 log=no log-prefix=""

For example, in one of my devices I have a dstnat on port 4570 to 172.17.16.136. This is the corresponding filter rule.

3

There is port mapping on the quick set page or ip firewall NAT... However, if you have wide open ports on your static ip, then why???

I use Ham 44 addresses that are wide open and close what ports I don't use...on my mikrotiks.

This setup tunnels through your router via wireguard and the ISP only sees the tunnel, but no idea what it is....
Setting up Ham44 is very easy on the GL-inet SFT-1200 and you get multiple static ip addresses (/28, /29).

4

My rules after slight revision

action=accept chain=forward dst-address=192.168.3.62 dst-port=4570
protocol=udp

action=dst-nat chain=dstnat dst-port=4570 protocol=udp to-addresses=
192.168.3.62 to-ports=4570

Now it connects momentarily no audio passes then disconnects

5

Both of your servers are set to 4570, just FYI.