# Port forarding on Mikrotik Router OS

**URL:** <https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902>\
**Category:** AllStarLink\
**Tags:** asl3\
**Created:** [August 10, 2026, 11:32pm UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902 "2026-08-10T23:32:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![N0FWG](https://community.allstarlink.org/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@N0FWG](https://community.allstarlink.org/u/N0FWG)\
**Post date:** [August 10, 2026, 11:32pm UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902/1 "2026-08-10T23:32:15Z")

</div>

Does anyone use Mikrotik routers with Allstar?

Fiber ISP with Static IP address, not blocking ports. I had it working with a OPNSense router before I updated and created multiple issues so I know the connection works

Router is a RB-450Gx2 with Router OS ver 7.23.3

I have setup the DST-dat for UDP port 4570 (correct port) as plan to move this node to a site where there is another node. Then a firewall rule to forward udp 4570 from WAN interface to accept

Parrot Node 2002 shows node is reachable

Any ideas?

Thanks  
Jerry

---

<div class="post-metadata">

**Author:** ![N8EI](https://community.allstarlink.org/user_avatar/community.allstarlink.org/n8ei/32/4254_2.png) [@N8EI](https://community.allstarlink.org/u/N8EI)\
**Post date:** [August 11, 2026, 3:27pm UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902/2 "2026-08-11T15:27:46Z")

</div>

I have tons of it behind Mikrotik. Very common in the amateur world.

Make sure that your rule is in the forward chain and that it's specifically permitting the destination NAT:

```auto
39 ;;; -----===== ASL Sever 460181 =====-----
      chain=forward action=accept protocol=udp dst-address=172.17.16.136 dst-port=4570 log=no log-prefix="" 

```

For example, in one of my devices I have a dstnat on port 4570 to 172.17.16.136. This is the corresponding filter rule.

---

<div class="post-metadata">

**Author:** ![NH6FU](https://community.allstarlink.org/user_avatar/community.allstarlink.org/nh6fu/32/2044_2.png) [@NH6FU](https://community.allstarlink.org/u/NH6FU)\
**Post date:** [August 11, 2026, 3:29pm UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902/3 "2026-08-11T15:29:00Z")

</div>

There is port mapping on the quick set page or ip firewall NAT... However, if you have wide open ports on your static ip, then why???

I use Ham 44 addresses that are wide open and close what ports I don't use...on my mikrotiks.

This setup tunnels through your router via wireguard and the ISP only sees the tunnel, but no idea what it is....  
Setting up Ham44 is very easy on the GL-inet SFT-1200 and you get multiple static ip addresses (/28, /29).

---

<div class="post-metadata">

**Author:** ![N0FWG](https://community.allstarlink.org/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@N0FWG](https://community.allstarlink.org/u/N0FWG)\
**Post date:** [August 12, 2026, 12:28am UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902/4 "2026-08-12T00:28:11Z")

</div>

My rules after slight revision

action=accept chain=forward dst-address=192.168.3.62 dst-port=4570   
protocol=udp

action=dst-nat chain=dstnat dst-port=4570 protocol=udp to-addresses=  
192.168.3.62 to-ports=4570

Now it connects momentarily no audio passes then disconnects

---

<div class="post-metadata">

**Author:** ![KK6RQ](https://community.allstarlink.org/user_avatar/community.allstarlink.org/kk6rq/32/3511_2.png) [@KK6RQ](https://community.allstarlink.org/u/KK6RQ)\
**Post date:** [August 12, 2026, 3:24am UTC](https://community.allstarlink.org/t/port-forarding-on-mikrotik-router-os/24902/5 "2026-08-12T03:24:14Z")

</div>

Both of your servers are set to 4570, just FYI.
