NAT

Добавляем интерфейсы в интерфейслисты

/interface list

add comment=defconf name=WAN

add comment=defconf name=LAN

/interface list member

add interface=ether1 list=WAN

add interface=bridge_lan list=LAN

srcNat

Включаем masquerade

/ip firewall nat add chain=srcnat action=masquerade out-interface-list=WAN

DstNAT

Проброс портов

OpenVPN

/ip firewall nat add action=netmap chain=dstnat comment=OpenVPN dst-port=1194 in-interface=ether1 protocol=udp to-addresses=192.168.1.205 to-ports=1194

1c from My IP

/ip firewall nat add action=netmap chain=dstnat comment=1c dst-port=3390 in-interface=ether1 protocol=tcp src-address-list=allowed_to_router to-addresses=192.168.1.201 to-ports=3389