MikroTik

I need a way to filter / see / block evil bots, I need to setup rules based on user agent, referrer, maybe geoip, etc. Having a referse proxy / cache server would be a plus. Basically most features that CloudFlare offers.

I think Mikrotik's features related to this are limited, no ? Mikrotik can ban individual IPs manually, it has a referse proxy / cache server, DNS cache is also nice, but other than that it looks like I need something else for the above needs.

Can someone recommend a setup for this ? I think what I need is a WAF like PfSense, OpnSense, Sophos. But is it possible to just have one of these and also do Mikrotik's job ?

I was thinking to create a fast desktop PC with more eth ports and use it instead of Mikrotik too.

Is that a bad ideea ? Is it more common to just separate these two (Mikrotik routing and WAF) so that they each have dedicated resources ?

It is harder to learn two different systems, that is also a reason to just build / use one.

There's the all-in-one approach where one box does it all. And there's "building blocks" approach where a few specialized boxes are used, each doing part of a job. Each approach has its pros and cons. Whatever you choose, if you want job done properly, you'll have to master the setup. General knowledge is the same for both approaches. Personally I prefer building blocks approach over all-in-one.

No one gives a shit if you dont have anything of value..............
In other words people go after you if.
a.. you have something of value
b. you have crappy security (easy mark).

A default setup of an MT router is fine for 99% of folks.
Why are you so paranoid?

If you are running a business then one spends in an appropriate manner for security.
a. Edge router and then internal routers,
b. anti-spam email boxes
c. Control all users PCs (unable to add software, have to have updated antivirus)
d. etc.........

If you want to take your basic hex router for example and add some decent protection then just do this for pennies...........
https://itexpertoncall.com/promotional/moab.html#prime
So little time to enjoy life, just set it and go do something useful vice fretting for nothing.