RDP access to windows behind opensense from external IP

[gielvandanu]

Hi guys,
As the title says, I want to rdp from external IP/network to the windows VM behind opensense without port forwarding.

Let says I have LAN network 192.168.2.0/24 on opensense. And I have network 192.168.3.0/24 on mikrotik.
I want my PC with IP 192.168.3.3 (behind mikrotik) to remote desktop to 192.168.2.4 (behind opensense).
Both network connected via static routes and can ping each other.

I already create "LAN" firewall rules on opensense to allow any protocol and any IP. But it always denied with "Default deny / state violation rule".  I can rdp to the opposite direction (windows vm to my pc)

Can you give me any hint to get this works?

Thank you

[yourfriendarmando]

add an allow rule for the interface shown with the error Default deny / state violation rule