MikroTik Router Configuration Advanced Firewall Rules For Network Security

As cyber attacks become increasingly sophisticated, it's more important than ever to protect your network with a strong firewall. In this post, we'll explain how to block ICMP requests to the WAN IP on your Mikrotik router.

ICMP (Internet Control Message Protocol) is a protocol used for diagnostic purposes in IP networks. It's often used to send ping requests, which can be used by attackers to probe your network and discover open ports or other vulnerabilities. By blocking ICMP requests to your WAN IP, you can prevent this type of probing and make your network more secure.

Steps to block ICMP requests on your Mikrotik router

Open the Winbox software on your PC or laptop.
Connect to your Mikrotik router using the IP address and login credentials.
In the left-hand menu, click on "IP" and then "Firewall".
Click on the "Filter Rules" tab at the top of the screen.
Click the "+" button to create a new rule.
Give the rule a name, such as "Block ICMP Requests to WAN IP".
In the "Chain" field, select "input".
In the "Protocol" field, select "icmp".
In the "Action" field, select "drop".
In the "Src Address" field, enter your WAN IP address.

Once you have completed these steps and saved the rule, your Mikrotik router will block all incoming ICMP requests to your WAN IP address. This will help to protect your network and keep your data safe.

Tips for configuring your firewall

While blocking ICMP requests is an important step in securing your network, it's just one part of a comprehensive firewall strategy. Here are a few tips for configuring your Mikrotik router firewall:

1. Limit access to your router

By default, your Mikrotik router is accessible from any device on your network. However, this also means that it's accessible to attackers who gain access to your network. To limit access to your router, you can create a firewall rule that only allows access from specific IP addresses or ranges.

2. Avoid the default firewall rules

When you first set up your Mikrotik router, it comes with a set of default firewall rules. However, these rules are designed for a generic network setup and may not provide the level of protection you need. Instead, it's best to create your own custom firewall rules based on your specific needs.

3. Monitor your firewall logs

Even with a well-configured firewall, there is always the possibility of an attack. By monitoring your firewall logs, you can quickly identify suspicious activity and take action before it causes serious damage. Make sure to review your firewall logs regularly and act on any alerts or warnings.

4. Use VPNs for remote access

If you or your team need to access your network remotely, it's best to use a VPN (Virtual Private Network) connection. This creates a secure tunnel between your device and your network, protecting your data and preventing unauthorized access.

By following these tips and implementing a comprehensive firewall strategy, you can help to protect your network from cyber attacks and keep your data safe. Don't let your network become a target - take action today to secure your Mikrotik router with a strong firewall.