How to set up remote access to Mikrotik and implement port forwarding?

Question

Computer networks

Good afternoon. There were several tasks in front of me, I found answers for the first one, but it was not possible to check it, since I would need to set it up in another city and I would like to know in advance how to do it right, because. there won't be much time. I didn't really care about networks.
There is a Mikrotik RouterBOARD RB2011UAS-RM (static ip from the provider), a desktop computer and several servers with access via a web interface via local IP within the network.
Tasks:

1. Set up Mikrotik for remote access, found 2 solutions:
   
   1. In the Mikrotik IP -> Services menu for the winbox service, you need to set Available From = 0.0.0.0/0
      
   2. In the menu IP -> Firewall -> Filter Rules tab, add a new rule Chain: input / Protocol: tcp / Dst. Port: 80 / Action: accept
      
   Is there a correct option here or is something missing?
   
2. Set up Windows Remote Desktop Protocol on Windows 7 Ultimate PC
   
   1. After reading on the Internet, I realized that I need to forward port 3389 on which RDP works, but with what parameters it is not entirely clear, I need your help
   
   
3. Set up remote access to server web interfaces via Mikrotik
   
   1. I realized that you need to reserve your own IP for each server via DHCP, and then forward the port to each. by type 111.111.111.111:3001 - the first server under ip 192.168.0.3 , 111.111.111.111:3002 - the second 192.168.0.4, etc. Where 111.111.111.111 is a static address.
      

Please tell me the right solution, thanks!

Answer 1

1. Yes, that's right, but it's better to open access to a tick using PingKnocking. Here is a moment of safety.
2. That's right, just do port forwarding through dst-nat. Again, for security reasons, do not port to port.
3. That's right, port forwarding through dst-nat.
To check, you can connect the PC to the port from where the external device comes to you, register the address with the "white" address from the same network and check

Answer 2

2. Access on a Windows PC
Forwarding in Mikrotik IP / Firewall / NAT
3. Forwarding to web servers in the same way, taking into account the necessary ports