Quantcast
Channel: MikroTik
Viewing all articles
Browse latest Browse all 15133

Forwarding Protocols • SSH port forwarding doesn't work

$
0
0
Hello everybody,

There is Qnap nas in my network it runs Gitea server and listens 22 port to accept SSH connections.
I want to listen 22 from my WAN and forward it to 192.168.15.50:22 again. But it doesn't works.

When i change the ports to 222 everything works. What is the problem?
Code:
# 2024-03-31 18:18:35 by RouterOS 7.14.2# software id = WDL2-L484## model = RB4011iGS+# serial number = B8F30B0E63D6/ip firewall filteradd action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untrackedadd action=drop chain=input comment="defconf: drop invalid" connection-state=invalidadd action=accept chain=input comment="defconf: accept ICMP" protocol=icmpadd action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1add action=accept chain=input comment="WinBox izin" connection-nat-state="" connection-state=new connection-type="" disabled=yes dst-port=8291 in-interface-list=WAN protocol=tcp tcp-flags=""add action=accept chain=input comment="NAS SSH" disabled=yes dst-port=8022 in-interface-list=WAN protocol=tcpadd action=accept chain=input comment="Gitea SSH" dst-port=22 in-interface-list=WAN protocol=tcpadd action=accept chain=input comment="OpenVpn Server " dst-port=11949 in-interface-list=WAN protocol=tcpadd action=accept chain=input comment="OpenVpn LAN" src-address=10.15.15.0/24add action=accept chain=input comment=Nginx dst-port=80,443 in-interface-list=WAN protocol=tcpadd action=accept chain=input comment=Mosquitto dst-port=1883 in-interface-list=WAN protocol=tcpadd action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LANadd action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsecadd action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsecadd action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yesadd action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untrackedadd action=drop chain=forward comment="defconf: drop invalid" connection-state=invalidadd action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
Code:
# 2024-03-31 18:19:54 by RouterOS 7.14.2# software id = WDL2-L484## model = RB4011iGS+# serial number = B8F30B0E63D6/ip firewall natadd action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WANadd action=masquerade chain=srcnat comment=Deka disabled=yes out-interface=deka_ovpn_clientadd action=masquerade chain=srcnat comment="Efe Apt." disabled=yes dst-address=192.168.2.0/24 ipsec-policy=out,none out-interface=ovpn-asusadd action=dst-nat chain=dstnat comment="Torrent Ports" in-interface-list=WAN protocol=udp to-addresses=192.168.15.50 to-ports=6881-6889add action=dst-nat chain=dstnat comment="Nginx Http" dst-port=80 in-interface-list=WAN protocol=tcp to-addresses=192.168.15.50 to-ports=80add action=dst-nat chain=dstnat comment="Gitea SSH" dst-port=22 in-interface-list=WAN protocol=tcp to-addresses=192.168.15.50 to-ports=22add action=dst-nat chain=dstnat comment="Nas SSH" disabled=yes dst-port=8022 in-interface-list=WAN protocol=tcp to-addresses=192.168.15.50 to-ports=8022add action=dst-nat chain=dstnat comment="Nginx Https" dst-port=443 in-interface-list=WAN protocol=tcp to-addresses=192.168.15.50 to-ports=443add action=dst-nat chain=dstnat comment=Mosquitto dst-port=1883 in-interface-list=WAN protocol=tcp to-addresses=192.168.15.50 to-ports=1883

Statistics: Posted by erdemefe — Sun Mar 31, 2024 6:21 pm



Viewing all articles
Browse latest Browse all 15133

Trending Articles