Community discussions

MikroTik App
 
thehay95
just joined
Topic Author
Posts: 1
Joined: Mon Sep 03, 2018 1:45 pm
Contact:

How to hide web interface of router from internet?

Mon Sep 03, 2018 1:47 pm

Hi! Just got my first RouterBoard. Is there any way to make web interface accessible only in local network and not from the outside (I have a white IP)?
I don't really like winbox and prefer using web interface instead, but I really dislike the idea that my router settings are public as hell. (if you noticed some mistakes, sorry, english is not my main language).
 
User avatar
ADahi
Member Candidate
Member Candidate
Posts: 217
Joined: Thu Sep 21, 2017 7:16 pm
Location: Iraq, Ninavah
Contact:

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 2:14 pm

you can use firewall and you have to block public access to the router
 
mkx
Forum Guru
Forum Guru
Posts: 5039
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 2:47 pm

Default firewall settings don't allow any access to management services (www,ssh,winbox,...) from WAN interface. You just need to keep /interface list member current.
BR,
Metod
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 1876
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 2:49 pm

IP/Services /WWW ... set available only from LAN subnet.
Real admins use real keyboards.
To quote or not to quote, there is the topic: viewtopic.php?f=2&t=168474
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 3:06 pm

Like mkx says, its not open form internet, only if you have added fw rules your self to do so.
 
How to use Splunk to monitor your MikroTik Router(s)

MikroTik->Splunk
 
 
stoser
Member Candidate
Member Candidate
Posts: 120
Joined: Sun Aug 21, 2016 12:04 am

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 4:27 pm

The best way to restrict who can access specifically the www interface for administering the router is to do what BartoszP wrote. In the www interface or winbox, choose IP ---> services. Select www. Specify which IP addresses or subnets can access the www service. While you are at it, restrict winbox access, telnet access, ssh access, ftp access, api access, etc to certain IP addresses or subnets too, or simply disable the ones that you will not use.

It is also extremely important to highly restrict all communications coming from the WAN access to your router, and this is done via the IP ---> Firewall ---> Filter Rules. There are more forum posts than I can count that address this topic, so just look it up

Kind regards
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1127
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 6:42 pm

As others have said, IP>Services and restrict it, best case firewall rule as well. Why not use Winbox and disable http&https altogether?
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
mkx
Forum Guru
Forum Guru
Posts: 5039
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 9:36 pm

@Steveocee, in your opinion, what are pros of using Winbox over Webfig/SSL? Other than Winbox/MAC...
BR,
Metod
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1841
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: How to hide web interface of router from internet?

Mon Sep 03, 2018 10:12 pm

Winbox support multiple windows open at the same time.
 
How to use Splunk to monitor your MikroTik Router(s)

MikroTik->Splunk
 
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1127
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: How to hide web interface of router from internet?

Tue Sep 04, 2018 11:36 am

@Steveocee, in your opinion, what are pros of using Winbox over Webfig/SSL? Other than Winbox/MAC...
Multiple open tabs simultaneously which whilst it sounds unhelpful, it is very useful at times.
MAC (you've mentioned) which is a lifesaver sometimes
Fluidity, http just doesn't feel well polished, Winbox feels native and like it is the primary interface.
Security, most users would default to typing in gateway IP address to access router, if there is no http server then you are that bit more secure
It works, I find http sometimes doesn't apply changes or I'll back out of wireless interface and it'll end up restarting the interface.
Cross platform, it works on WIndows, Linux (I used it on Ubuntu with WINE for a couple of years), and I'm now using it on Mac thanks to Joshaven's package.
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
mkx
Forum Guru
Forum Guru
Posts: 5039
Joined: Thu Mar 03, 2016 10:23 pm

Re: How to hide web interface of router from internet?

Tue Sep 04, 2018 12:12 pm

While I agree with most arguments by @Steveocee, I can't agree with the last one (about winbox being cross-platform). Web access is the most platform-independant thing in modern internet, no "thick client" can beat it. I've had my share of problems running winbox on my Windows7 x86 machines - it wasn't problem of firewall, it simply didn't start (threw some error). The most recent one (3.17) is fine with me so far.
BR,
Metod
 
solar77
Long time Member
Long time Member
Posts: 577
Joined: Thu Feb 04, 2016 11:42 am
Location: Scotland

Re: How to hide web interface of router from internet?

Thu Sep 06, 2018 6:26 pm

winbox 3.1.7 have one issue with me: reconnect to a device, it won't open it in new window.
MTCNA MTCTCE UEWA

Who is online

Users browsing this forum: aTan, pltlg and 73 guests