How to properly configure the router for ts_block to work?

Question

System administration

There is a terminal server windows server 2008r2, it costs 1c, clients connect via rdp. There is mikrotik, on which port 3389 is forwarded to this server. The ts_block program is configured on the server, which should block the ip addresses of those who could not log in. The problem is that in the windows log, instead of the ip address of the client, the ip address of the gateway is blocked. Once I solved this problem, but kill me I don’t remember what I did, it seems that I didn’t correctly set up the rules on the router after the reset.

Answer 1

When forwarding the port, the ip address of the gateway gets into src. And there is simply no information about the real address of the client.

Answer 2

Is the out interface specified in the nat src-nat masqarade rule?

Answer 3

Answer 4

if you post the router config, then the game "what, where, how!" going faster...