Allow RDP only for selected IP's

RouterOS General
1

Hi all.

I have a few port-forward rules, to 2 of them everyone can connect.

add action=dst-nat chain=dstnat comment="Port Forward" disabled=no dst-port=9999 protocol=tcp to-addresses=192.168.0.3 to-ports=3389
add action=dst-nat chain=dstnat comment="Port Forward" disabled=no dst-port=2010 protocol=tcp to-addresses=192.168.0.4 to-ports=3389

But to one computer just specific/selected IP should have the right to connect, I made the list and the rule but it doesn’t work, what is the correct rule to deny everyone except selected IP’s ?

This one doesn’t work, I still can connect from any IP:

add action=dst-nat chain=dstnat comment="Port Forward" disabled=no dst-address-list=ALLOW dst-port=1111 protocol=tcp to-addresses=192.168.0.2 to-ports=3389

Thank you in advance.

2

If you want to allow only specific addresses that are able to connect to RDP then it should be src-address-list=ALLOW

3

ty, my fault :slight_smile: