Hi guys i have a mikrotik rb951g-2hnd. In this morning my ssid was changed, but i don’t think that a neighbor do this. Can this be done from distance like from another country. And when i enter the log apear that an ssh tried to connect(the ip was from china), i hard reset the router and now is ok.
If you had it unfirewalled (ssh), and used a weak password, that was probably the cause.
What was the SSID they set?
thx for reply, the ssid translated sound like this “i have big ba**s”, the router firewall must be on? what settings can i make to be more protected?
The default firewall, applied when you reset to defaults, is absolutely optimal for 99% of SMBs:
/ip firewall
filter add chain=input action=accept protocol=icmp comment="defconf: accept ICMP"
filter add chain=input action=accept connection-state=established,related comment="defconf: accept established,related"
filter add chain=input action=drop in-interface=ether1 comment="defconf: drop all from WAN"
filter add chain=forward action=fasttrack-connection connection-state=established,related comment="defconf: fasttrack"
filter add chain=forward action=accept connection-state=established,related comment="defconf: accept established,related"
filter add chain=forward action=drop connection-state=invalid comment="defconf: drop invalid"
filter add chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1 comment="defconf: drop all"
Just make sure you set the proper WAN, i.e. if you’re using a pppoe-client, or vlan, set it as the WAN, and not the ether (ether1 in the former code) it’s bound to.
thank you very much, can you please explain how can i set it as the WAN ?i don’t understand very well
Please post
/export hide-sensitive=yes