Mikrotik IP Cloud Service...selectable IPv4/IPv6

RouterOS General
1

Hi Guys,

I’m running rOS 7.5 and wondering if there is a way to only associate the xxxxxxxxxxx.sn.mynetname.net used by the cloud service to the external IPv4 ONLY. Not the IPv4 and IPv6 address. The reason I ask is because typically with IPv6 you don’t firewall your servers the same way as with IPv4 and while an IPv6 is more complex the corresponding DDNS name might be easily guessed/known exposing the server to a range of attacks via the DDNS name.

As it currently stands the mikrotik serial numbers are long enough to deter someone from trying to spoof or guess them but if that list of serial numbers ever gets out it could be problems for people using the Mikrotik cloud service.

Is this something that the dev team can implement via a tick box option.

Regards,

2

Maybe you don’t, but almost everyone else does (I’m sure there are other folks out there like you), even the default MikroTik IPv6 firewall rules are enough to protect the router and what’s behind it.
Block IPv6 communication to the MikroTik cloud service and your ddns won’t get an IPv6 addr.

3

But regardless of reasoning, ability to choose between IPv4/IPv6/both could be useful.

4

Sure, in a feature request.

5

Thanks for your replies, how do I request this as a feature?

6

You create an account here: https://help.mikrotik.com/servicedesk/servicedesk/customer/user/login?destination=portals
After that, there’s a “Suggest a new feature” section.
Or write in this endless topic: http://forum.mikrotik.com/t/feature-requests/41609/1

7

One should absolutely be firewalling their forward v6 traffic if the hosts behind it do not run their own sufficient firewalls.

8

There, I've corrected your post for you.