WebFig v6.11 enable router config from external IP

Currently the Router is set only to accept connections from inside the LAN, I would like to access the Router configuration via WebFig from an external Static IP, say 123.456.789.123.

In Firewall → Filter Rules →

I have added a new Rule
Action : accept
Chain : input
Src. Address : 123.456.789.123

[admin@FINR1] /ip firewall filter> print

Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=accept protocol=icmp

1 chain=input action=accept src-address=123.456.789.123

2 chain=input action=accept src-address=172.16.100.0/24

3 chain=input action=drop


I have searched quite a few posts and have tried opening various ports but have gone back to the beginning because I am clearly doing something wrong.

Could somebody please help me with the next steps.

Ultimately I have bought another 2011UiAS so I can permanently VPN two sites.

Thanks,

Andrew.

This does not look like a default config. What else have you modified?
Probably better to show the config.

Yes its far from default, but its the last “functional” configuration. There are two WAN connections, and also a bunch of rules routing to a PFsense box for another site to VPN into a specific server. I am a little bit wary of posting the whole config so publicly. What part of the config would you find useful for this issue? Could you give me the Terminal text and I will paste the output.

Thanks!