How to prevent rdp connections from an unspecified address to dir-615?

Question

D-Link

Good afternoon, there is a d-link dir-615, behind it there is a server to which users go via rdp, the task is to allow connection to its port (router) 3389 only from certain external addresses (by analogy with Mikrotik, specify several src.adress from which rdp will be available or create several rules, each of which will indicate the address from which the connection will be allowed), I did the obvious, created a virtual server with forwarding without specifying remote ip , and decided to hide behind a firewall, went to firewall -> ip filters and created there several rules like source xxxx:all, dst: yyyy:3389, action - allow and one like src: all:all dst: yyyy:3389, action - deny however I can still connect to the specified rdp from any address, and from google I found out that d-link-a has an IP filter that is only responsible for outgoing traffic,But how can I limit the incoming one? Otherwise, it turns out that on Mikrotik this is done quite obviously, but on the d-link it is not entirely clear.

Answer 1

I found a solution in principle, we create several virtual servers, indicating remote ip, but with moments, on the d-link you cannot create 2 rules for external port 3389 indicating different external addresses, but you can specify different ports, for example, to connect from address 1, we use the connection to external port 3389 with a redirect to internal 3389, for address 2 we use port 3390 with a redirect to internal port 3389, etc. yes, crooked \ obliquely, and just do crutches, but in general it works.

Answer 2

I found out from Google that d-link-a has an IP filter that is only responsible for outgoing traffic

This is a bad, useless d-link, if Google is not lying. I advise you to reflash to * WRT, this approach will work there.