1. Access Your MikroTik Router

First, connect to your MikroTik router using WinBox or the command line interface (CLI). These tools allow you to configure and manage your router easily.

2. Open Ports Using NAT Rules

To forward incoming traffic on a specific port or range of ports to a device on your local network, use the following NAT rule:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=80-8888 action=dst-nat to-addresses=192.168.1.100

dst-port=80-8888 – Specifies a port range from 80 to 8888. The rule will apply to all ports within this range.

to-addresses=192.168.1.100 – Replace this with the local IP address of the device that should receive the forwarded traffic.

3. Open a Specific Port

If you only need to forward a single port, such as port 80 (HTTP), use the following command:

/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat to-addresses=192.168.1.100

4. Configure Firewall Filter Rules

To ensure that the traffic is allowed through the firewall, create the following filter rule:

/ ip firewall filter add chain=input protocol=tcp dst-port=80 action=accept

This rule allows incoming TCP traffic on port 80.

5. Security Recommendations

Opening a wide range of ports, such as 80–8888, can expose your network to unnecessary security risks. It is strongly recommended to open only the ports required by your applications or services, reducing your attack surface and helping to keep your network secure.