Create VPN for user to access to FTP only

Hi all,

I would like to create a VPN for a user to access on of the server inside my network, basically the VPN user will dial in from internet, then it will pass thru my Mikrotik, then based on my firewall rules, it will only allow this VPN user to access port 25 of one my local server 192.168.100.1 .

VPN (PPP) user (dial in from internet) >>> Mikrotik >> Assign a IP to this VPN user >> permit this VPN user to access port 25 (FTP) of 192.168.100.1 and Deny this VPN to access any other ports or servers

basically, i only allow this user from internet to ftp our local server, no other port or services or server is allowed.

what is the best practice to achieve this?

Thank you very much!

Set firewall rulles to allow access only to tcp/25 from client’s ip or interface.