This seems like something that should be simple, and yet I can’t figure it out (and haven’t been able to find any solutions via Googling or browsing these forums).
My local network is 192.168.0.1/24
My RB (gateway) is 192.168.0.1
Public IP is 1.1.1.1
I have an external server at 2.2.2.2 that I need to Remote Desktop into (RDP)
How can I setup my firewall rules so that I can RDP to 2.2.2.2 via an internal address/port (eg 192.168.0.xxx:yyy)?
This is simple to accomplish via SSH local port forwarding - I can SSH into the RB (or any other SSH server) and specify local port 1234 to be redirected to 2.2.2.2:3389, and then RDP into 127.0.0.1:1234 and it works.
However, I’d like to eliminate the step of SSH first, and (for example) RDP directly to 192.168.0.1:1234 and have the firewall automatically redirect that connection to 2.2.2.2:3389.
The “why” is because when I work from home, my work laptop has a VPN configuration that allows local traffic, but not internet traffic - so I can’t RDP to 2.2.2.2 while VPN’ed in from home. The SSH tunnel trick works, but I’d like to simplify that step if possible. And because I just want to learn more about how to do cool stuff with RouterOS ![]()