how to allow specify device for access WebFig from public ip??
I try to use this rule, but not work.
add chain=input protocol=tcp action=accept src-mac-address=xxxxx in-interface=WAN
add chain=input action=accept in-interface=wan_iface src-address=remote_ip protocol=tcp dst-port=80
Move in over your drop rule in input chain. Is risky if you not specify src-address!
src-address is dynamic ip such as my mobile device. Thus I try to use specify src-mac-address.
Any idea for this ??
mac address is not possible from internet. I also use my phone for remote access. my ip is also dynamic, but vary only in last numbers, 202.5.0.xxx and i use in rule src-adreess=202.5.0.0/24. only 256 ip can try, much better than all world)
You can use Port Knocking to add actual address into allowed address list for WebFig access.
http://wiki.mikrotik.com/wiki/Port_Knocking