/ip firewall nat add chain=dstnat dst-address=<public address> protocol=tcp dst-port=80 \ action=dst-nat to-addresses=192.168.88.248 to-ports=80
/ip firewall nat add chain=dstnat dst-address=<public address> protocol=tcp dst-port=443 \ action=dst-nat to-addresses=192.168.88.248 to-ports=443