Videoguida Mikrotik #3 - Firewall e port forwarding

/interface bridge add name=BRIDGE-LAN /interface ethernet set [ find default-name=ether1 ] comment=WAN /interface wireless set [ find default-name=wlan1 ] antenna-gain=3 band=2ghz-b/g/n channel-width=20/40mhz-Ce country=italy disabled=no frequency-mode=regulatory-domain mode=ap-bridge radio-name=SETTE ssid=SETTE wireless-protocol=802.11 /interface pppoe-client add add-default-route=yes disabled=no interface=ether1 max-mru=1492 max-mtu=1492 name=pppoe-tsi password=test user=test /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=dhcp_pool0 ranges=192.168.7.20-192.168.7.254 /ip dhcp-server add address-pool=dhcp_pool0 disabled=no interface=BRIDGE-LAN name=dhcp1 /interface bridge port add bridge=BRIDGE-LAN interface=ether2 add bridge=BRIDGE-LAN interface=ether3 add bridge=BRIDGE-LAN interface=ether4 add bridge=BRIDGE-LAN interface=ether5 add bridge=BRIDGE-LAN interface=wlan1 /ip address add address=192.168.7.1/24 interface=BRIDGE-LAN network=192.168.7.0 /ip dhcp-server network add address=192.168.7.0/24 dns-server=192.168.7.1 gateway=192.168.7.1 /ip dns set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4 /ip firewall address-list add address=192.168.7.5 list=ACCESSO-RB add address=192.168.7.7 list=ACCESSO-RB /ip firewall filter add action=accept chain=input comment=ACCESSO-RB dst-port=2222,8088,18291 protocol=tcp src-address-list=ACCESSO-RB add action=drop chain=input comment="DROP SERVIZI RB" dst-port=2222,8088,18291 protocol=tcp add action=accept chain=input comment="ACCEPT ENSTABLISHED RELATED" connection-state=established,related add action=accept chain=input comment="ACCEPT ECHO REQUEST" icmp-options=8:0 protocol=icmp add action=drop chain=input comment="DROP EVERYTHING ELSE" in-interface=pppoe-tsi add action=drop chain=forward connection-state=invalid add action=drop chain=forward dst-address=192.168.8.0/24 src-address=192.168.7.0/24 /ip firewall nat add action=masquerade chain=srcnat out-interface=pppoe-tsi src-address=192.168.7.0/24 add action=dst-nat chain=dstnat dst-port=7000 in-interface=pppoe-tsi protocol=tcp to-addresses=192.168.7.50 to-ports=7000 /ip service set telnet disabled=yes set ftp disabled=yes set www port=8088 set ssh port=2222 set api disabled=yes set winbox port=18291 set api-ssl disabled=yes /system clock set time-zone-name=Europe/Rome /system logging add action=disk topics=dhcp /system package update set channel=long-term