Due to recent security failures, we'd urgently need the ability to bind IP services to a specific IP / Interface, like can be done in allmost all linux servers.
Filter by src-address isn't enough, cause if service daemon itself gets compromised...
YES, we need this!
And it is NOT related to filtering.
I need to run www service on LAN bridge interface ONLY. And i need it to bind to port 80 on that specific interface!
Because i need port 80 to be FREE elsewhere to be forwarded from internet to my web server. So, i need to NAT port 80 from internet to a server on my LAN which is behind mikrotik's NAT. And at the same time have the ability for inexperienced administrators to reach webfig from LAN by only typing the IP address, which goes by default to port 80.
We need different services which use the same port number be accessible at different interfaces.
Thanks