Hi all,

Need to know if this functionality can be implemented within Mikrotik routers

I have a RB4011 and would like to give access to only one external IP by firewall at a certain port, and when a fixed substring is attached to give access to everyone.

As an example.

Router public IP is MyPublicIP. LAN server IP 192.168.88.10, Port is 8888. Safe IP is MySafeIP
Access http://MyPublicIP:8888 only from MySafeIP is easy by basic IP Firewall and NAT to 192.168.88.10
However would like to give access to anyone typing http://MyPublicIP:8888/MyApp ( and only with MyApp substring )
or even better to change port http://MyPublicIP:9999/MyApp to go to 192.168.88.10:888/MyApp, everything else to be blocked.

Thanks for any help.

no one? possible , not possible?

hi, nobody in the world can do what you are looking for out of the box, what you need is a reverse proxy in addition to the rb. br

You may be able to do it using the proxy:

https://wiki.mikrotik.com/wiki/Manual:IP/Proxy

You may be able to do it using the proxy:

https://wiki.mikrotik.com/wiki/Manual:IP/Proxy

So reverse proxy yes, but how do you want to solve that with a normal proxy?

Proxy in RouterOS can be misused as reverse proxy:

https://web.archive.org/web/20201111190 ... eb_Servers

It's not ideal, but I've seen people doing worse things.

crazy, 2 years MT intensively over many data centers - but i haven't come across that yet with routeros, cool and sorry for my bottles of post then above

It's not that I'd recommend it, I see it more as hack, but it's possible.

Thanks all for info.
I will try the routeros solution linked above.
If not succesful means I will have to learn how to setup a ngnix server.🤔
Cheers!