Blocking of http traffic to router via public ip

RouterOS Beginner Basics
1

Hi

Hope everyone is well?

I’m new to this, and to the Mikrotik routers.

What imp trying to find out and achieve, is to block all http traffic to a router via public ip.

for example:

I have an existing router in play, when I open my browser and enter the public ip assigned to it, I can view all the stats on the interfaces when I select the graphs option when presented with the home page.

is there a way where by this option can be disabled or blocked?

Thanks

2

There are a couple of different ways to do this. You can goto IP → settings and disable the www (and www-ssl) section or specify a LAN address that it can be reached by. You can also create a firewall filter rule in the input chain that says drop anything on port 80. You can also turn the graphs off under Tools → Graphing. Just remove all of the entries.

3

I would think that if you disable web services or drop port 80 that you would affect both public and private traffic.

I’d suggest that you create an input drop chain that drops all except port 80 from the LAN.

EXAMPLE:
chain=input action=drop connection-state=invalid
chain=input action=accept connection-state=established
chain=input action=accept connection-state=related
chain=input action=accept address-list=x.x.x.x/x protocol=tcp port=80
chain=input action=drop