Protect rule

loveman · October 24, 2015, 1:33pm

Hi
Any one have filter rule to protect server from hacker in outside please write your rule here.
Security rule

loveman · October 25, 2015, 6:45am

No answer

deanMKD1 · October 25, 2015, 8:29am

Disable unused services from your MT device.
Add firewall rules to stop port scanning.
That it.

docmarius · October 25, 2015, 8:46am

I like the following approach:

place the server on a private IP
using destination nat forward only the services you need to be accessible from the WAN
use masquerade for outgoing server connections
drop every other forward from the outside to the server

yancho · October 25, 2015, 8:47am

Router = server?
If so Wiki have some examples http://wiki.mikrotik.com/wiki/Firewall
If server is server behind router and providing some services to outside then we need more information.

loveman · October 25, 2015, 2:51pm

Thank you
In your number
1 you mean go, ip,services
And disable for example ssh, telnet, spi, www ssl
And only able
Www, winbox
…
In your number 2 can you show me in picture what you meaning?

loveman · October 25, 2015, 2:53pm

Thank you
Can you upload picture for
drop every other forward from the outside to the server
How can do this?

loveman · October 25, 2015, 2:54pm

Thank you
I will see the website soon

cross · November 20, 2015, 9:57am

About that firewall port scanning rules in MT.

I Saw few posts from the past year and people did notice that none of those tutorials describing rule examples works.

And I checked few of them for example this one http://wiki.mikrotik.com/wiki/Drop_port_scanners(because is more complicate ) and it doesn’t work either.

So how to build good rule ?