I have a PC with firewalled. I kept receiving attack from MT using port 5678 UDP. I don’t know wether coming from users under LAN or wat.
Does anyone know what port 5678 UDP used for.
Cheers
It’s coming from RouterOS, the neighbor discovery feature. You can turn it off in IP / Neighbors / Discovery Interfaces if it bothers you.
Thanxxx!!! It works 
It seems, command
/ ip neighbor discovery set discover=“no”
will disable neighbor discovery broadcasts for ipv6 also.
Thanks! I also saw outgoing UDP packets on port 5678 in logfile.
When I disabled it on my LAN ports I saw that this neighbour-discovery is disabled on ether1 per default (default WAN port).
I use ether5 as WAN port - are there some other “hidden” settings like this which should be disabled when I use any other port than ether1 as WAN port?
Just remember that with neighbor discovery turned off, you won’t see the Mikrotik from winbox when you hit the […] discovery button. (Just an FYI, not saying ‘only fools do this’) You can still type in the MAC address manually if you ever break the IP configuration of the box.
