Recently i have been facing problems with pptp.
So one day pptp stopped working and there were no way to fix it but only by resetting the router and restoring the backup.
Same thing happens everyday.
When it happened today i went into mikrotik logs and i see "user admin logged in from “static ip address” via api.
Than a lot of config changes happens and that user logs out automatically.
See pic attached.
How is this possible i have strong password.
How can i block any attempt to log via api.
Do you have up to date RouterOS? Because if not, and you’d also happen to have WinBox port accessible from outside, then strong password is not enough:
And about blocking API, do you use it yourself? If not, simply disable the whole thing in IP->Services. If you need it, then limit access to selected IP addresses or networks, either in IP->Services or using firewall.
Thank you.
Your answer helped me.
I vent into IP->Services and i disabled everything except winbox because i connect to it only with it.
Also at winbox “available form” i let only my LAN static IP addresses.
