Whitelist an IP for external access to LAN

RouterOS Beginner Basics
1

Hi guys,

I need to whitelist an external IP on the router to access a VM on the LAN.

I wasnt sure how to do this in the terminal so did it using the GUI:

IP->Firewall->NAT->add new

Chain: dstnat
Src address: (external ip for whitelist)
Dst address: (router ip)
Protocol: 6(tcp)

Dst.Port (3306)

action: dst-nat
To Address: (ip of of vm)
To ports (3306)

Any help appreciated

2

Just leave the DST-Address Empty and it will work