MikroTik - is it possible to filter traffic to a forwarded port?

Question

Mikrotik

I'm trying to cross a hedgehog with a rhinoceros, namely:
restrict access to forwarded
MikroTik ports - is it possible to restrict access to a forwarded port by a number of IP addresses?
+
protection against password brute force
bozza.ru/art-264.html
At the output, I want to block ip addresses (as described in the 2nd article) from brute force, provided that traffic is forwarded to the local machine behind nat

Answer 1

Well, in the listing of commands from your article, replace chain from input to forward, and port from 22 to 3389, and place it after your rules that allow authorized ip addresses to connect.

Answer 2

How to add IP addresses with this method to exceptions? I have users connecting from several regions, and where there are more than two of them, blocking problems constantly arise.