How to hide from traceroute

RouterOS General
1

Hello, I want hide from traceroutes the Mikrotik.
How can I do?

Thanks.

2

/ip firewall filter add action=drop chain=input protocol=icmpThis will make your router not reply to pings either.

-Chris

3

Thanks for your response, but don’t solve my question, I have this rule active, but when I do a traceroute to some of the VPS servers hosted in a server that are connected to the CCR, the router hops are still visible.

I want hide completly the router/CCR.

4

Now that’s really surprising.
I just checked on a router myself and when using the input chain, it’s really still visible.
I switched to the output chain and now the router is invisible (well, you see a hop, but requests just time out).
When switching to forward chain, you won’t see anything behind the router’s LAN interface…

-Chris

5

Many thanks! Yes, now is solved :slight_smile:

/ip firewall filter add action=drop chain=output protocol=icmp

And also blocking in Linux nodes:

iptables -A OUTPUT -p icmp --icmp-type any -j DROP

Regards!!

6

Will you be able to send ping from router itself?