We have some devices that we need to publish for several technicians outside a costumers network. They are insecure so we need to make something more than just port forwarding. The technicians don't come from a static address so I can't filter based on source address.
Any ideas on how to solve this with just a mikrotik-router?
- Port knocking would be doable if we script the port knock process on the client machines. But not very convenient
- VPN would also be doable, but not optimal due to some circumstances