how to allow specify device for access WebFig from public ip??

I try to use this rule, but not work.

add chain=input protocol=tcp action=accept src-mac-address=xxxxx in-interface=WAN

add chain=input action=accept in-interface=wan_iface src-address=remote_ip protocol=tcp dst-port=80

Move in over your drop rule in input chain. Is risky if you not specify src-address!

add chain=input action=accept in-interface=wan_iface src-address=remote_ip protocol=tcp dst-port=80

Move in over your drop rule in input chain. Is risky if you not specify src-address!

src-address is dynamic ip such as my mobile device. Thus I try to use specify src-mac-address.

Any idea for this ??

mac address is not possible from internet. I also use my phone for remote access. my ip is also dynamic, but vary only in last numbers, 202.5.0.xxx and i use in rule src-adreess=202.5.0.0/24. only 256 ip can try, much better than all world)

You can use Port Knocking to add actual address into allowed address list for WebFig access.
http://wiki.mikrotik.com/wiki/Port_Knocking