How to properly configure firewall in mikrotik for pptp server?

Question

Computer networks

There is a mikrotik with Internet access via ether1 . Local network on ether2 172.16.0.1/24. A pptp server has been set up on it (everything was configured according to the Mikrotik wiki), local address 10.1.1.1 remote address 10.1.1.2. firewall:

;;; Invalid
chain=input action=drop connection-state=invalid log=no log-prefix="" 
chain=forward action=drop connection-state=invalid log=no log-prefix="" 

;;; Established,related
chain=input action=accept connection-state=established,related in-interface=ether1 log=no log-prefix="" 
chain=forward action=accept connection-state=established,related log=no log-prefix="" 

Local in internet
chain=forward action=accept in-interface=ether2 out-interface=ether1 log=no log-prefix="" 

;;; Winbox
chain=input action=accept protocol=tcp dst-port=8291 log=no log-prefix="" 

;;; PPTP
chain=input action=accept protocol=tcp dst-port=1723 log=no log-prefix="" 
chain=input action=accept protocol=gre log=no log-prefix="" 

;;; All others
chain=input action=drop log=no log-prefix="" 
chain=forward action=drop log=no log-prefix=""

With this configuration, the connection from a remote client (windows 7) succeeds. But the client does not see any resources on the local network. If I remove the last two rules in the firewall, then everything works. And how to add rules so that the locale is visible from the vpn client, I'll never know.

Answer 1

Before the last rule add

/ip firewall filter add chain=forward src-address=10.1.1.2 dst-address=172.16.0.0/24 action=accept
/ip firewall filter add chain=forward src-address=172.16.0.0/24 dst-address=10.1. 1.2 action=accept