Mikrotik, blocking all traffic except one port?

Question

Computer networks

Kind!
There is a local area network of office 192.168.0.0/24. One port of the router is allocated to a separate network 172.16.0.0/24. This network has a VPN server with the address 172.16.0.2. I want to prohibit all traffic from the network 172.16.0.0/24 to the network 192.168.0.0/24, except for packets from the address 172.16.0.2 on tcp port 12345 to 192.168.0.2 tcp 3389

Answer 1

What's the problem? You have described everything in such detail that there is no need to think about it. It’s just strange somehow, I can’t imagine a case in which such a configuration would be needed.
/ip firewall filter
add chain=forward src-port=12345 dst-port=6336 protocol=tcp src-address=172.16.0.2 dst-address=192.168.0.2
add action=drop chain=forward src-address=172.16.0.0/ 24 dst-address=192.168.0.0/24