Under linux I could setup iptables rules which affected all pptp users, by referencing the interface like pptp-*

Under RBOS I can no longer do so - I think. Does that mean I can only create filters for PPTP control based on their source address? That seems very risky!

Thanks

you can add static pptp entries in "/interface pptp-server" menu and use those interfaces.

but that means I would have to create one new interface for EACH user. Then, I would have to replicate the firewall rules for EACH interface.

Is there a way to reference all interfaces by prefix like pptp-*

otherwise I would have to now create one (or more) firewall rules to EACH interface (for EACH user).

Address list?

There's no easy to add each user to the address list (road warrior scenario)...or perhaps you could be more specific (maybe Im missing something).

There is an option in /ppp profile to add to address list.

http://wiki.mikrotik.com/wiki/Manual:PPP_AAA

OK - so the address list is associated with the profile, and the profile is associated with one or more users/secrets.

OK - thanks.