Binding web gui to inside interface?

I just got a RB750 and have setup a external HG612 modem running in bridge mode (ADSL) connected to a RB750 with pppoe client running.

HG612 connects to the ether1-gateway, and I have ether2-master-local connected to the internal network. IP for RB750 is 192.168.1.1

This is now all working but I’ve noticed the RouterOS web gui is accessable on the public address.
Is there a way to bind the web gui to only 192.168.1.1.

  1. I only want it to be accessable from the internal network. I access it for the graphs.
  2. I have port forwarding on port 80 set to a internal .

You cannot really bind it to a specific address, however you can limit the networks it accepts connections from in /ip service. You can also do what you need via the /ip firewall filter.

And, by the way, your problem description makes me believe you now have your firewall filter misconfigured badly. In case your are running a close-to-default configuration, please inspect your firewall filter rules and make sure your pppoe-client interface is specified as your external interface where applicable.

To be clearer: go to the IP->Firewall menu, open the Filters tab and check for the lines that drop traffic from interface ether1-gateway.
You need to change that interface into the pppoe-in interface you have configured.

/ip service
set www address=192.168.1.0/24

replace 192.168.1.0/24 to your local network address

Thanks for the input all. I’ve now setup the firewall correctly and also set the service to only be accesalble from the internal network.