One last Newbie Question.. Hopefully

RouterOS Beginner Basics
1

I used GRC.com to test my connection to the internet and it says I have 443 open, which i really shouldn’t and also port 0 responds that its there but closed. I was looking around for a setting about remote management which I assumed was the port 443 being opened. Not sure what to do about port 0. I would prefer it not respond at all.

Is there a remote management setting or is this something I need to do in the Firewall section?

Thanks, Bill

2

There are to much options for protecting your router and remote management it secured! One of them is to drop connections initial form WAN and allow IP Sec, so connect to router with VPN and do whatever you want!

3

Sorry, using a VPN won’t help me turn off port 443 on the WAN side of the router. Its Open to the Internet and all the script kiddies.

4

Properly configured /ip firewall filter can completely close all accesses from internet while allowing you to connect to router from your LAN.

Which is what default firewall does. If some random internet site shows port 443 open, it can be due to 3 things:

  • you changed default firewall filter rules (or you configured WAN interface in the way it’s not compatible with default firewall rule set)
  • your WAN IP is not public IP, ISP might be performing CGNAT and has port 443 forwarded somewhere else
  • you actually constructed port forwarding (in /ip firewall nat section) to some internal host meaning those random internet site is not poking router but rather the internal host.
5

Instead of guessing what the OP has done why not simply ask for the config…
Argg and I thought this would be a new week, lessons learned and all that…
Cant teach an old mkx dog new tricks LOL.

/export hide-sensitive file=yourconfigmay28