Community discussions

MikroTik App

Search found 12 matches

by jahu
Sun Sep 22, 2024 4:41 pm
Forum: Beginner Basics
Topic: ipv6 security
Replies: 14
Views: 1468

Re: ipv6 security

Disabling IPv6 support on router is definitely a safer option ... with firewall rules it's always possible to screw something up. But as @Sob wrote: IPv6 is here to stay and it's only a matter of time when you'll have to bite into this nut ... so you better crack it open before biting it. Thanks a ...
by jahu
Wed Sep 18, 2024 11:58 pm
Forum: Beginner Basics
Topic: ipv6 security
Replies: 14
Views: 1468

Re: ipv6 security

I'd say don't fight it, IPv6 is the future. But it's also true that you'll be able to survive without it for quite some time. Also it's not clear what kind of security you're after. That DNS server seems to be outgoing address of whatever resolver you use. If it's run by someone else, you can't inf...
by jahu
Tue Sep 17, 2024 12:44 am
Forum: Beginner Basics
Topic: ipv6 security
Replies: 14
Views: 1468

Re: ipv6 security

forum gurus any insights?
by jahu
Sat Sep 14, 2024 7:01 pm
Forum: Beginner Basics
Topic: ipv6 security
Replies: 14
Views: 1468

Re: ipv6 security

It depends - disabling IPv6 will not filter IPv6 traffic between LAN ports (bridge traffic). 1. But dsiabling it will keep me safe from WAN side? In a home network ipv6 bridge traffic should not impose a security risk if I am not mistaken? 2. If I enbale ipv6 and have the mentioned firewall rules i...
by jahu
Sat Sep 14, 2024 2:28 pm
Forum: Beginner Basics
Topic: ipv6 security
Replies: 14
Views: 1468

ipv6 security

Hello If i want make ipv6 as secure as possible, meaning not used at all or blocked entirely, will /ipv6 settings set disable-ipv6=yes be enough? Or is it better to have it enabled and set the firewall rules below? /ipv6 firewall filter add action=drop chain=input comment="Drop all IPv6 ICMP tr...
by jahu
Wed Sep 11, 2024 12:10 am
Forum: Beginner Basics
Topic: Default firewall config
Replies: 30
Views: 64707

Re: Default firewall config

anyone else which would have insights on this? anav seems busy
by jahu
Sat Sep 07, 2024 2:01 pm
Forum: Beginner Basics
Topic: Default firewall config
Replies: 30
Views: 64707

Re: Default firewall config

It is fine for the basic generic setup the OP was looking for in terms of: TAKING the default firewall set of rules and a. make them efficient b. change concept to block all and identify needed traffic above block all rule. If its good for your scenario, if different from a single subnet one bridge...
by jahu
Sat Aug 31, 2024 7:42 pm
Forum: Beginner Basics
Topic: Default firewall config
Replies: 30
Views: 64707

Re: Default firewall config

It is fine for the basic generic setup the OP was looking for in terms of: TAKING the default firewall set of rules and a. make them efficient b. change concept to block all and identify needed traffic above block all rule. If its good for your scenario, if different from a single subnet one bridge...
by jahu
Sat Aug 31, 2024 5:53 pm
Forum: Beginner Basics
Topic: Default SOHO Firewall Rules
Replies: 10
Views: 1091

Re: Default SOHO Firewall Rules

examples of firewall rules https://forum.mikrotik.com/viewtopic.php?t=153581#p855249 simply in the forward chain, prior to the last rule ( Drop all else ) Add in the traffic required device A to Subnet B or Subnet C to device D for example......... given that you are referring to the other thread i...
by jahu
Wed Aug 28, 2024 11:33 pm
Forum: Beginner Basics
Topic: Default firewall config
Replies: 30
Views: 64707

Re: Default firewall config

anyone?
by jahu
Sun Aug 25, 2024 4:03 pm
Forum: Beginner Basics
Topic: Firewall
Replies: 0
Views: 668

Firewall

Hi all, I want to ask a question in default firewall config thread but my question is never shown in the thready.why?

I am new, is the last answer summary there usable or does smth need to be changed or altered to make more secure?
by jahu
Sat Aug 24, 2024 1:31 pm
Forum: Beginner Basics
Topic: Default firewall config
Replies: 30
Views: 64707

Re: Default firewall config

hi, I am also interested in this. Are the summary settings in the last post above safe to use or is anything missing or should anything be modified?