I Need To Make A Change With My IT Support! Call (225) 706-8414

Mikrotik Firewall: Configure NAT Entries for Internal Servers

You host servers behind your Mikrotik firewall and need to setup NAT entries for them. In this example, we will create a NAT entry for an internal email server.


  1. Telnet into your Mikrotik device
  2. Enter the following command:
    • ip firewall nat chain=dstnat action=dst-nat to-addresses=ServerIP to-ports=25 protocol=tcp dst-address=ExternalIP dst-port=25
    • NOTE* You must include the dst-address= entry, if you do not include this entry ALL port 25 traffic will be redirected to your internal server! dst-address= specifies the IP address the firewall should listen to for inbound email.


Concerned About Cyber Attacks?


Want to Migrate to the Cloud?

Office 365

Ready to Experience Microsoft Office 365?

Want the latest IT news directly in your inbox? Subscribe now!