Hello all,
I have a question that has been bothering me. When I'm scanning my mikrotik router for open ports from the Internet I see that ports 80, 443 and 8080 are opened. In Winbox IP Services all services but Winbox (default port changed) are disabled. Why port scanner finds these ports open? How can I block them? Been trying with chain=forward action =drop protocol= TCP dst-address=mikrotiks IP dst-port=80 but seems it does nothing. I'd really appreciate any help.

Hello,

As you're scanning the router, you need to use the "input" chain.

Not sure why they would bee open if the services are disabled though...


Sent from Tapatalk