MikroTik

hello, i've learnt a lot with your help in last posts. About security, networking, and many other things.

Today i have the problem that i need to add a mikrotik as a "shield" to protect my network against the attacks.

im going to introduce the schema in order to explain the situation.

Cctually i have a web system in a windows server, accesible by port 443.

with my router's network 192.168.10.1, direct to internet cause i have an static ip from my ISP.
i Protected it with so many rules.
But now i want to add a shield, to avoid the main router faces the internet.

my actual mikrotik is an rb 2011 with ip 192.168.10.1.
i bought a RB 3011 and added the network 10.0.0.1-

I think, i found that i can carry internet from RB3011 to RB2011 doing this from mikrotik wiki's link:
https://wiki.mikrotik.com/wiki/Manual:S ... ic_Routing
but, i want you to give me your opinion.

And i want to do something like, if i go to port 443 in RB3011, redirect that port to 1443 in RB2011 network.

i don't know if i'm being clear about telling my situation.

thank you so much.