The web proxy access list is configured under /ip web-proxy access. Protect your router using firewall rules.To protect your MikroTik RouterOS? from being used as spam relay you have to: How to Protect your MikroTik RouterOS? from being used as Spam Relay? Description After adding new rules, move them up using the move command. After a rule matches the packet, no more rules are processed for it. Remember that firewall rules are processed in the order they appear on the list. You may need to include additional rules to allow access from certain hosts, etc. Examine the system log file /log print to see the packets which have been dropped. Use reset-counters command to reset the counters. Use /ip firewall rule input print packets command to see how many packets have been processed against these rules. ip firewall rule input add action=drop log=yes

ip firewall rule input add src-address=192.168.0.0/24Ĭomment='This is web proxy service for our customers. ip firewall rule input add src-address=10.0.0.0/24Ĭomment='Allow access from our local network. ip firewall rule input add protocol=icmp comment='Allow ICMP Ping' ip firewall rule input add protocol=udp comment='Allow UDP' ip firewall rule input add connection-state=related ip firewall rule input add connection-state=established You can add following rules under /ip firewall rule input (just 'copy and paste' to the router using Terminal Console or configure the relevant arguments in WinBox): /ip firewall rule input add connection-state=invalid action=drop Note, that the input chain does not affect packets which are being transferred through the router. All packets with destination to the router are processed against the ip firewall input chain. To protect your MikroTik RouterOS?, you should not only change admin's password but also set up packet filtering. How to Protect your MikroTik RouterOS? Description

Mikrotik transparent firewall