For example, forward WAN port 8006 to LAN server 192.168.1.11:8006 WAN port name WAN
Forward WAN:8006 → Server:8006
/ip firewall nat add chain=dstnat \
in-interface-list=WAN \
protocol=tcp dst-port=8006 \
action=dst-nat to-addresses=192.168.1.11 to-ports=8006
Allow traffic
/ip firewall filter add chain=forward \
in-interface-list=WAN \
dst-address=192.168.1.11 \
protocol=tcp dst-port=8006 \
action=accept