can I enable entering winbox from one user\address?

RouterOS General
1

I know how to use this option:

/ip service set winbox address=10.0.0.1

so only user with IP 10.0.0.1 can enter the device
but I want just this IP to be able to see the router in “search”
can it be done?
I have found this rule

 0    ;;; Block winbox discovery
      chain=forward action=drop protocol=udp dst-port=5678 log=no 
      log-prefix=""

but it doesn’t work - any one can still see the router

any idea ?

Thanks ,

2

Change chain=forward to chain=input

I tested this, it works.

forward = packets that are NOT destined to an ip of the Mikrotik, rather the Mikrotik will forward them onward.

input = packets destined to an ip of the Mikrotik.

output = packets originating from the Mikrotik.

3

Thanks ,
It’s working !

:slight_smile: