DST-NAT allow only from specified SRC address

Hi,


how I can specified source adresse that can resolve through the public IP local IP



1.1.1.1 - - – - ---- 2.2.2.2/Mikrotik/192.168.1.1 ---- - – - 192.168.1.2


/ip firewall nat add chain=dstnat dst-port=1234 dst-address=2.2.2.2 action=dst-nat
to-addresses=192.168.1.2 to-port=1234


I want that only 1.1.1.1 can goes to 192.168.1.2 through port 1234, and of course vice versa.

  • 192.168.1.2 only can goes to 1.1.1.1

thx

src-address=1.1.1.1

Regards,