Hi,
I have disabled access to my router for all public addresses except x.x.x.x which is fine but I cannot get the ROS updates.
I would like to know which address or address range do you use for updates so I can exclude them from filter.
Thanks
My name is definitly not Normis, you’d be better off changing this subject, because I’ve a suggestion for you:
Add a simple firewall rule:
/ip firewall filter
add action=accept chain=input connection-state=established,related
That rule allows established or related connections from entering your router. So for instance, if you try to query a DNS-server from your router, or if your router checks the MikroTik servers for updates, the reply of the server will get through.