Looking at the test results shown in the attachment- are these results fungible across ports if you are not using all of the ports on the system at the same time? Maybe a specific example would be "if I'm switching a stream of 64B packets from port 1 to port 5, and there's NO OTHER traffic on t...

Why python? -- Because I already know it! I didn't even know there WAS a routerOS scripting language, but that's a very useful tip.
Apologies for the typo.
And while *I* don't expect to use this regularly, maybe it helps someone else.
Certainly just one of many ways to solve this particular task.

I spent part of the weekend figuring out how to get pinhole firewall NAT ("port mapping") rules built, and I had a bunch of existing rules from another system that I didn't want to manually convert. So I put together this little python script to generate the rules which can then be pasted ...

LOL. I wasn’t asking for your approval on my security policies, I was asking for help in what to look for/at. Perhaps someone else has a lower standard of paranoia and will provide some ideas on how to troubleshoot the actual problem? If someone can defeat SSH with a nonstandard username and a long ...

I've got a setup with a small set of firewall rules to permit inbound connections on a set of TCP ports, which are bound/listened to by the routerOS HTTPS and SSH services. I've changed the input ports from their defaults (to provide at least smoke-screen level security), and added INPUT chain firew...

Is there some way that you can muck about with iptables in a “temporary” way such that if you screw up(*) and do something stupid like lock yourself out of the router, you can fix it by just doing a reboot instead of a full-on factory reset? Most major network operating systems have something like t...