/ip firewall nat add chain=dstnat dst-address=外网IP protocol=tcp dst-port=80 / action=dst-nat to-addresses=内网服务器IP to-ports=80