Hi,

i have a RB750UP with a public one ip address on ethernet 1 to my ISP. A bridge interface with ethernet2-5 has a routed IP net (/29) All works ok. connections to my routed IP net are being routed to the connected devices on ethernet2-5.
I deleted all firewall and NAT rules...
My router is now an open router for the internet.. I need to secure this..
winbox and web access are already restricted to a certain IP, but I want to reject connections from the internet if they don't have the routed IP subnet as a destination.
Im working remote, so i cannot experiment and change because i will lose my connection to the router.
does someone know which firewall rule I need to make?

thanks a lot!
regards