Newbie question| Make RDP more secure

Hello folks.

I would like to setup avery basic RDP (windows remote desktop) security.
I need to connect to the remote PC located on the other side of my city using windows RDP.

No need for complex stuff like encryption, vpn etc…the simplier the better as there is nothing valuable on this PC.
Perhaps allowing to connect frome some specific IP address (or address range) would be enough.

By reading a manuals I finally succeeded with simple port forwarding (see picture attached) and feel proud of it :slight_smile:
port_forward.png
But none of the manuals were easy enough to guide me to some “ip whitelist” solution.
Any help would be appreciated.

Thanks!

Your requirements are not clear and it appears you are trying to stuff a round peg into a square hole syndrome.
In other words, you assumed a solution without discussing what it is the users actually need.//////////////

Try this
it uses address lists to restrict connections
/ip firewall filter

add action=accept chain=forward dst-address=192.168.3.4 dst-port=3389
in-interface=ether1-gateway protocol=tcp src-address-list=rdp

/ip firewall nat

add action=dst-nat chain=dstnat dst-port=3389 in-interface=ether1-gateway
protocol=tcp src-address-list=rdp to-addresses=192.168.3.4 to-ports=3389

/ip firewall address-list

add address=YOUR REMOTE WAN ADDRESS comment=home list=rdp

To: arnoldmikro

Thanks a lot. Your scripts worked exactly like I wanted. Now I have RDP access to the remote pc only from fixed IPs.

To: anav

Each time I have to do some adjustments to my Mikrotiks I feel either dumb or lazy.
Imho Ros is just so user-unfriendly for the user who doesn’t want to invest a lot of time into setup, but wants reliable hardware for reasonable price.
Sometimes I regret I’ve bought those two devices..and this makes me feel sorry for local manufacturer (yes, I live here :slight_smile:)

Thanks a lot guys!

Agreed, RouterOS is not consumer friendly in the same way as ASUS, D-Link, Netgear, or TP-Link consumer products.

RouterOS is enterprise function at value price. Arista, Cisco, Juniper, etc. at enterprise level are skill development challenges as well.