Hi,

Could anyone help me with the following?

1) I have RB433 acting as a router and wireless ap
2) one of devices connected via wifi is getting fixed ip
How to expose only the one IP fully to the internet (lets say some "full nat" or whatever and maybe excluding this ip from all firewall rules) but still all keep other clients connected to the ap safe?
Before i bought a mikrotik, I had an old asus router where I only set which IP should be in the dmz and it was done but I don't know how to achieve the same result on the router os...

thanks for help

Depends on the rest of your configuration.

Post the output of "/ip address print detail", "/ip route print detail", "/interface print", "/ip firewall export", and an accurate network diagram.