Planning to get MikroTik Router. Mikrotik users are welcome.

[anmolbhard004]

no pls guide on that

 

[Lolita_Magnum]

That is weird, default Firewall Rules should have been good enough unless you removed them.
Go to IP > Services >

From the list, disable everything except winbox.

Can you share your IP > Firewall Page, so I can suggest rules accordingly?
Alternative, if you ssh to the router. Pasting the output using the following command will be better.

ip/firewall/filter/print

 

[anmolbhard004]

Yes, telnet and ssh were enabled have disabled it now . Now I can't see those logins happening .
No I dont ssh to router [ don't even know what that is]

Flags: X - disabled, I - invalid, D - dynamic 0 chain=input action=drop protocol=tcp in-interface=ether1 dst-port=53 log=no log-prefix="" 1 chain=input action=drop protocol=udp in-interface=ether1 dst-port=53 log=no log-prefix="" [admin@RouterOS] /ip firewall filter>

Also I intend to keep the webfig as this is the only way I can connect to router, for winbox I have to continuously use a lan cable and its kept at a certain height which is not feasible regularly and also not in my room.
Can you suggest some way to keep webfig and also be safe from attacks? Please do state if anything else is required.

Source

 

[Lolita_Magnum]

Ok, judging by this. It seems either you or someone deleted all important firewall rules. Hence, your network is completely unprotected.

The smartest thing to do would be to reset the router and setup again, as adding 15-20 firewall rules will be too tedious.

Any reason why you need LAN cable to use winbox? As it should work from anywhere in your LAN.

 

[Lolita_Magnum]

Preferably, update your RouterOS first to the latest version and then perform a format.

 

[anmolbhard004]

If that is the case then thanks to the Mikrotik consultant I hired when I bought the product.
Have updated the os to latest.
without lan cable connected to mikrotik can I use winbox? how?
will reset it now but please tell how do I connect to winbox without a lan?
and firewall has nothing to do with my ip cameras na? If after resetting the cameras should work as usual ?
IP Cameras default gateway / range is 192.168.0.1

 

[Lolita_Magnum]

what's your Mikrotik ip ? Default is 192.168.88.1. You can change their IPs/Gateway to the following.

 

[anmolbhard004]

currently I access Mikrotik on 192.168.1.1 see the above screenshot in address bar the ip is 192.168.1.1
resetting the mikrotik now.
nah wont disturb the cameras changing for 16 cameras would be tough .

 

[Lolita_Magnum]

Parts where I have not mentioned, are usually default.

IP > Address List

Address: 192.168.1.1/24
Interface: bridge

IP > IP Pool

Address: 192.168.1.100-192.168.1.254

IP > DHCP Server

DHCP >
Interface : bridge
Lease Time : 06:00:00
Address Pool : pool1
Queues >
Insert Queue before : first

Network >

Address : 192.168.1.0/24
Gateway : 192.168.1.1
DNS Servers : 4.2.2.2

This should be good enough, do disable everything related to your default IP 192.168.88.1 after that.

 

[anmolbhard004]

Source done