HELP! Cant access my Router

RouterOS Beginner Basics
1

Hi, i have a problem with the firewall and hope you can help me guys, im new to Mikrotik and i messed up the firewall rules :X i saw in log that someone was trying to root my router and wanted to prevent this and so i made a new firewall rule: chain=input action=drop and now im not able to connect to my router, pretty safe :smiley: can i access it somehow without factory resetting it?

2

Connect to it, then check Winbox Neighbors tab for your router to appear, double clicking on its mac address field.

This is called mac-winbox, as you’ll be connecting by mac-layer protocol (L2).

3

WOW you made my day, thanks a lot! can you tell me how to configure the firewall correctly so only local pcs could connect to the router?

4

i added a firewall rules chain=input action=accept src=192.168.0.0/24 and chain=input action=drop now i can access it without any problems but i hope no one outside this net will be able to connect to it

5

Glad it helped.

Default configuration firewall it’s an optimal default; to see the rules for your router, open a New Terminal and issue

/system default-configuration print

These are usually the rules:

/ip firewall filter
filter add chain=input action=accept protocol=icmp comment="defconf: accept ICMP"
filter add chain=input action=accept connection-state=established,related comment="defconf: accept established,related"
filter add chain=input action=drop in-interface=ether1 comment="defconf: drop all from WAN"
filter add chain=forward action=fasttrack-connection connection-state=established,related comment="defconf: fasttrack"
filter add chain=forward action=accept connection-state=established,related comment="defconf: accept established,related"
filter add chain=forward action=drop connection-state=invalid comment="defconf: drop invalid"
filter add chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1 comment="defconf:  drop all from WAN not DST-NATTED"

Make sure to replace ether1 with your WAN interface; if you use PPPoE to connect to your ISP, then use pppoe-out interface as WAN.