VPN on Mikrotik, how to disable internal resources?

Question

VPN

There is a local area network 192.168.1.0/24, through the PPTP server. configured on Mikrotik, clients from the Internet connect via RDP to the server 192.168.1.100, the pptp settings indicate that clients receive addresses like 192.168.10.x. Now, after the client establishes a pptp connection, the entire network 192.168.1.0/24 with all resources becomes available to him. How to configure Mikrotik so that only the terminal server (192.168.1.100) is available to pptp clients?

Answer 1

/ip firewall filter add chain=forward in-interface=all-ppp dst-address=!192.168.1.100 action=drop

or
Don't forget to place the rule in the correct place in the firewall.

Answer 2

Set up a firewall