I am new to Mikrotik and ROS and I'm currently using ROS 6.27 with a RB951Ui-2HnD. My ISP uses pppoe for authentication and I used QuickSet with the "HomeAP"-Setting.
When taking a look at firewall rules the device is open to the whole world. After half an hour, I got 200 failed logins in the log via SSH, Telnet, Winbox-Port and WWW. In fact, the firewall-rules are completly useless when QuickSet is used.
Is this the normal behaviour when using QuickSet with pppoe?
I don't often use quickset but did for a customer a while back. They were PPPoE and the quickset firewall rules forgot to block traffic in the pppoe interface. The block on the underlying ethernet interface was there. The bad guys were using the the DNS cacheing server as part of a DDoS. My fault for not double checking the quickset generated rules.
There are several places where the quickset generated rules could use some cleanup, at least in the versions of RouterOS where I've tried it out. Why put the IP on the ethernet of HomeAP routers which use the bridge-local?