How to restrict VPN users (pptp,l2tp) on mikrotik RB2011?

Question

VPN

On mikrotik, 2 networks are raised, let's assume 2 subnets and 6 subnets. VPN PPTP is configured, when connecting via VPN, the user receives the address from the 6th subnet, how to configure privileges so that the user who connects via VPN does not have access (did not see) the 6th subnet, except for his ip, and to the 2nd subnet, except for one address from this subnet. Those. the machine to which they must connect and nowhere else, located on the 2nd subnet, and they themselves are from the 6th. Link to articles if possible. Thank you.

Answer 1

Let's assume that the user connected via vpn received the address 10.1.6.15, other users also receive addresses from 10.1.6.0\24.
Try to make a rule in a chain

forward, action=drop, src-address=10.1.6.0/24, dst-address=10.1.6.0/24

Just above it put the rule

forward, action=accept, src-address=10.1.6.0/24, dst-address=10.1.6.1

(where 10.1.6.1 is the gateway address for users).
Thus, we will cut all traffic from the sixth subnet to the sixth subnet, except for traffic from the sixth to the gateway.
If you need to further restrict all the others except the second, then
To be honest, I haven't tried it, but in theory it should work. Maybe the packet flow diagram experts will correct me

Answer 2

Can distribute /32 pseudo-subnets to clients?