Configuration to block users that tries to access router on non open port(s)

[Jotne]

You can add a an access list above the block filter list and add IP that never should be blocked, like 8.8.8.8 etc.
But as an ISP, you would never know what IP clients are using as DNS etc, so many not work prefect.

\

Use Splunk> to log/monitor your MikroTik Router(s). See link below.

MikroTik->Splunk