Hi everyone, friends!)
I was not so long ago use this perfect software on my routerboard.
Sorry, for my bad English (
I learn about Firewall on this device. And make rule, for forwarding ports from my local network machine to the avilable in my static real ip.
for example:
i'm use:
Chain - dstnat; Dst.Address - @my real ip on the provider interface@; Protocol - 6tcp; Dst.Port - 8888
Action - netmap; To Addresses - 192.168.0.10; To Ports - 80
It's rule work, and I can connect @my real ip on the provider interface@:8888, and it be really 192.168.0.10:80

But i have a question: how i can do this connection only from another ip adress. Now i can connect to the @my real ip on the provider interface@ from all World network, but how can i do connetct to this address from 91.xxx.xxx.xx only for exemple? Not to mikrotik interface adress, but use this new rule to my dstnat rule, what i write?

Thank for your answer, or link to read this exemple...

Heelo,

Just add your address 91.xxx.xxx.xx in src-address.

Regards,

Hello
I have some question too.
I was blinded till now, because I thought, why there is some firewall rules in mikrotik. It is not needed indeed, because I have some NAT rules.
But now I faced with some problem. I have Public IP address with nat to local IP address. There is some server. But allowed communication is between some other server with public IP.
So... How can I allow communication between two servers (one is my and another is not mine ) through specific ports. And anything else is dropped down / not allowed?

i want to allow some IP to allow internet and block all network !!! Please tell me the configuration .