Well… the subject says all 
I have dynamic public ip addres with DDNS and I want to set in my MKTs firewalls only input access to my address…
How can I do ?
Regards
S.T.
Just leave out src-address and filter based on incoming interface.
Sam
Ok, but I will access the MKTs via the WAN Interface, so I want to allow INPUT only to my DDNS ADDRESS to make it more secure…
Can I do it ? A script to update the IP address in the src-address field 
???
Regards
Ah, so you are on a dynamic IP trying to connect to a remote MT on a static ip ? If so, then its an option to run a script to do a :resolve and populate that address every so often, or even better use a port knock (instant access).
Sam
Yes, that´s my configuration… where can I find the script ?