The new version of Winbox 2.2.10 lets you access to a Mikrotik machine where the www service in IP Services are close to a certain IP network.
I have to closed the IP Services using filter rules in the INPUT chain.
Is this a bug ? If is so, it have not been fixed yet ?
Current (2.9) RouterOS versions do NOT connect to the www service of the router anymore (like earlier versions did).
In earlier versions WinBox checked installed packages and downloaded plugins via HTTP, so disabling the www service stopped WinBox from connecting. But even back then WinBox itself connected over another port.
The current WinBox doesn’t rely on this HTTP connection anymore.
The ONLY way to stop unwanted WinBox (and other 
) connections is using the INPUT chain and filter your traffic there!
Best regards,
Christian Meis