I have about 20+ Mikrotik routers in use. For almost all (but not all) all firewall DROP rules are disabled! have only noticed it now because a provider has turned off an Internet connection (DNS Server). Nothing was changed, no passwords changed or user created. The devices have different Internet providers and no commonality.
Can it be that all devices were hacked same Time? Has anyone ever experienced that? Can it be a malfunction?
The devices have different firmware versions, so it’s not that only older ones are affected. Sure, you can increase security, but the configuration is not insecure or faulty.
