Mengamankan Port pada MikroTik

1. Menutup Port-port secara penuh (IP -> Service)

Misalnya menutup Port di Router : Telnet, ftp, ssh, www, www-ssl, api dan hanya Winbox yang terbuka.

 /ip service
set telnet address=0.0.0.0/0 disabled=yes port=23
set ftp address=0.0.0.0/0 disabled=yes port=21
set www address=0.0.0.0/0 disabled=yes port=80
set ssh address=0.0.0.0/0 disabled=yes port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291



2. Membatasi Akses port untuk IP tertentu saja.
 

/ip firewall filter

add action=drop chain=input comment=”" disabled=no dst-port=22 protocol=tcp src-address=192.168.76.2

 




3. Men-Drop IP yang “diduga” usil dan membahayakan (misal bisa dilihat dari Log yang ada di Router)

 ip firewall filter

add action=drop chain=input comment=”" disabled=no dst-port=22 protocol=tcp src-address=192.168.76.2

 

 4. Mengganti service port

 

/ip service

set www address=0.0.0.0/0 disabled=no port=3001