Mikrotik firewall settings?

Question

Mikrotik

Tell me how to do it right?
There is a Network 192.168.250.0/24 is an office network and there is a network 192.168.0.0/16 in which there are devices that need to be monitored,
but only certain ip addresses from the office network should have access to the network 192.168.0.0/16. In general, only one IP address should have access to the network. Offices are connected via SSTP.
Thank you in advance....

Answer 1

Principle (only principle!):

allow forward src-address-list=allowed dst-address=192.168.0.0/24
deny forward src-address=192.168.250.0/24 dst-address=192.168.0.0/24

Answer 2

To prompt good to dock on iptables? In Mikrotik, everything is according to the standard, there are a few improvements for greater convenience, and everything is according to the standard ...
I started with this
Poke Method - that is, poke there, write here, next-next-next, etc. - it will not work. You need to understand what you are doing.