MikroTik RouterOS Firewall Protecting Your Network From Intrusions And Attacks

If you're using a Mikrotik router to manage your network, you might be concerned about ICMP requests coming into your WAN IP. These requests, also known as ping requests, can pose a security risk if left unchecked. Luckily, there is a way to block ICMP requests to your WAN IP. In this post, we'll walk you through the steps to do just that.

Step 1: Log in to your Mikrotik router

The first step in blocking ICMP requests is to log in to your router. To do this, open a web browser and enter your router's IP address in the address bar. Once you're on the login page, enter your username and password. If you don't know your login credentials, you may need to contact your network administrator.

Step 2: Navigate to the Firewall section of your router

Once you've logged in to your Mikrotik router, you'll need to navigate to the Firewall section of your router. This is where you'll be able to configure your firewall rules.

Step 3: Create a new firewall rule

Now that you're in the Firewall section of your router, it's time to create a new firewall rule. To do this, click on the "Firewall" tab in the left-hand menu, and then click on the "Filter Rules" sub-tab. From there, click the "Add New" button to create a new rule.

Step 4: Configure the firewall rule

When you create a new firewall rule, you'll be presented with a number of configuration options. Here's what you need to do to block ICMP requests:

Set the "Chain" option to "Input".
Set the "Protocol" option to "ICMP".
Under the "General" tab, set the "Action" option to "Drop".
In the "Advanced" tab, set the "In Interface" option to your WAN interface. This will ensure that the rule only applies to your WAN IP.

Step 5: Save the firewall rule

After you've configured the firewall rule to your liking, click the "Apply" button to save the rule. Your router will then apply the rule, and you'll be protected from ICMP requests coming into your WAN IP.

Additional tips for securing your network

While blocking ICMP requests is an important step in securing your network, there are other things you can do to further ensure your network's safety. Here are a few additional tips:

1. Use strong passwords

One of the easiest things you can do to secure your network is to use strong passwords. Avoid using easily guessable passwords like "password" or "123456". Instead, use a mix of characters, numbers, and symbols to create a password that's difficult to crack.

2. Enable WPA2 wireless encryption

If you're using a wireless network, it's important to ensure that your network is encrypted. The most secure encryption protocol is WPA2, so make sure it's enabled on your router.

3. Keep your router's firmware up to date

One of the easiest ways for hackers to gain access to your network is by exploiting vulnerabilities in your router's firmware. Make sure to regularly check for firmware updates and install them as soon as they're available.

4. Enable MAC address filtering

MAC address filtering is a technique that allows you to restrict access to your network based on the MAC address of a device. This can be a useful tool for preventing unauthorized access to your network.

5. Disable unused network services

Your router may come with a number of pre-installed network services that you don't need. Make sure to disable any services that you're not using to reduce your network's attack surface.

Read also

Conclusion

By following the steps outlined in this post, you can block ICMP requests to your WAN IP on your Mikrotik router. This is an important step in securing your network, but it's not the only thing you can do. By following the additional tips we've provided, you can further enhance the security of your network and protect yourself from malicious attacks.