Hi,
I want to configure port forwarding from Internet to my local machine, but I have a some problem. I not able to connect to PC

[*] MikroTik RouterBoard hAP ac3 (D53iG-5HacD2HnD) os 6.46.8 -> Port Forwarding 3389
[*] Windows 11 Pro (RDP enabled) locally we can setup connection
[*] MikroTik cloud DDNS enabled

My conf is shown in attached picture. Diagram: Internet -> Modem as bridge -> Mikrotik hAP -> PC all is connected over LAN


What should I check to determine the reason for not being able to connect?

The in-interface=bridge is wrong (assuming that bridge is your LAN), remove that option completely. Also dst-address=109.173.x.x may be problematic if it's not static. If that's the case, remove it too and use dst-address-type=local instead.

The MT Config is not just bits here and there, they are connected and affect other settings.
Please post config
/export hide-sensitive file=anynameyouwish

And in my opinion, opening RDP to your local computer from the internet is dangerous! Can you count the number of seconds before that gets hacked?
Far better to use a VPN to access your local LAN and use RDP from there. Or at least port knocking and use a non-standard port.

Concur, wireguard is a good VPN that is easy to implement and RDP can ride over that!!

It's the same as with any other server, as long as it doesn't have any security hole and you don't use easy to guess usernames and passwords, it's ok. That said, I tend to not expose RDP to internet, I don't trust Microsoft that much.

That said, I tend to not expose RDP to internet, I don't trust Microsoft that much.

Ding! Ding!! Ding!!!

https://www.rds-tools.com/rds-knight/

:d