Hi, I have OPenVPN set on my Mikrotik. When I try to log in with WinBox over a WAN. Miktorik rejects the connection.

denied winbox/dude connect from xx.xx.xx.xx

Through the web interface, everything works properly, but it's so cumbersome and I lack some features.
Would anyone know how to put this into operation?
Thank you.

If you're trying to connect via MAC (clicking the MAC address of the router): MAC connections can be governed via /tool mac-server settings ... If you're trying to connect via IP, then make sure IP firewall allows connection to winbox TCP port (8291) via VPN interface (chain=input).

I'm connecting via IP. I think the firewall is set up correctly, otherwise I would not get into the router via the web interface.

do you add allow ip in /ip services?

I'm connecting via IP. I think the firewall is set up correctly, otherwise I would not get into the router via the web interface.

Without seeing your configuration export, it is hard to say whether the assumption above is correct or not. Except firewall rules, the access may be restricted to particular list of source subnets in /ip service.

Without seeing your configuration export, it is hard to say whether the assumption above is correct or not. Except firewall rules, the access may be restricted to particular list of source subnets in /ip service.

Yes, but I'm logging in from one computer. That is the same IP, the same subnet. I connect via WEB without problems, but I do not connect via WInBox.

Show the export (see my automatic signature below regarding anonymisation), otherwise no one can guess what's wrong.

Yes, I can see it now, thank you very much.
Incorrectly set IP in Services.
Thanks again for the guidance.