How to fortify my CCR 2004 -16g - 2s+ router. Recently password hacked and the router was compromised. Reset the router configuration with fresh install. What are the default Minimum firewall rules. Can I have from AI?

Start from the (unofficial) Rules of the Mikrotik Club: [image] The twelve Rules of Mikrotik Club Beginner Basics Preamble and disclaimer: The following is a set of Rules that are intended as advice useful to avoid the most common errors observed in configurat…

[image] estateofficer: Can I have from AI? Yes, you can. Why not? But remeber to ask that AI for help when you would have problems. Just a rethorical question: do you blindly believe to AI answers?

I would recommend you to use this method that I copied. The logic here is that you ban everything and then allow only what you need. It is a good practice. /firewall filter add action=accept chain=input comment= “defconf: accept established,related,untracked” connection-state= established,relat…

If your router was hacked, then you need to use netinstall to put in a fresh 7.21.3 for example.

CCR Router Firewall default rules -???

RouterOS Security

jaclaz February 3, 2026, 12:04am 2

Start from the (unofficial) Rules of the Mikrotik Club:

Rule #8 Is about the default firewall, in its corollary there is a link to an updated set of default firewall rules.