How to secure BtestServer?

RouterOS General
1

Hi,

Is there any way to secure BtestServer running on Mikrotik so it can be acessed without general rules:

add action=accept chain=input comment="BTEST " protocol=tcp
add action=accept chain=input comment="BTEST " protocol=udp

Without those rules firewall on device doesn’t allow connection to device with Btest client from WAN. I know that i can add certain IP in src. adress but then i cannot test from more locations and i have to change this ip for every test from different location.

2

with this two rule you destroy all firewall security

3

extremely basic

/ip firewall filter 
#===accept===
add action=accept chain=input dst-port=2000-2100 protocol=udp src-address-list=lan
add action=accept chain=input dst-port=2000-2100 protocol=tcp src-address-list=lan
#===drop===
add action=drop chain=input  dst-port=2000-2100 protocol=tcp 
add action=drop chain=input  dst-port=2000-2100 protocol=udp

/ip firewall address-list add list=lan address=192.168.x.0/24
4

I know that, that is why i'm asking. I will try the rules above.

5

If i understand correctly, this only allows btest from 192.168.x.0/24 ?

6

correct