Firewall in RouterOS: Block Snooping & Eavesdropping

Oftentimes, you will find yourself bombarded by various types of unwanted traffic throughout the net, including offers, ads, pop-ups and so on. In MikroTik's RouterOS, there is a simple procedure that includes the torch tool and firewall configurations through which you can track down, pinpoint, and block these annoying types of traffic.

[@mjsun42]

Very good tutorial ! looking forward to your MTCINE course !

[@MikroTikCanada]

Dear MJ SUN, Many thanks for your watching our video. We’re happy you liked it! We’ll be sure to keep you updated on upcoming courses!

[@alimibrahem8120]

Very thanksful for the amazing explaination. 🙏. yet i still wounder why you put a src raw rule for ads IPs..!? So yes its clear why you put dst rule but what is the benefit of src rule as the traffic come from outside..?

[@MikroTikCanada]

Dear Ali M Ibrahem Many thanks for watching our video and putting your question here. The reason we created raw rules with the passthrough and, subsequently, the drop action on our address list both as sources and destinations was merely for the purpose of analyzing traffic logs. Indeed, dropping the traffic at one end would suffice. However, bear in mind that network protocols have different types of behavior and you sometimes need to take actions at both ends. We will discuss these issues in upcoming tutorials and focus on the methods of implementing firewalls.

[@alimibrahem8120]

@@MikroTikCanada thanks..! and my sincerly regards..!! realy excited for the upcoming tutorials.!

[@yfcvtiybr]

You are repeated a few times in the videos about your website and didn't give us a link. How can I find it?

[@MikroTikCanada]

Dear e1herne1, Many thanks for asking and watching our videos. To find the complete categorized list of all tutorials, please refer to our website at www.wirelessnetware.ca/ > Training > MTCNA.

[@yfcvtiybr]

@@MikroTikCanada thank you!

[@MartinSalde]

hello sir do have config for gaming or bandwidth management

[@nasirayofe279]

Seems to have a negative effect on latency. Also causes my phone to think there's no internet. The internet works fine but still get the message "Connected without internet" on the wifi

[@AlanScott-cl2or]

So this is simply not practical in the real world. Firstly you have to manually add the addresses, secondly adding sites like Amazon and Apple will block traffic that could be genuinely requested from this sites.

[@MikroTikCanada]

You're absolutely right; it seems there's a bit of a misunderstanding. This video is part of a lab session aimed at demonstrating how to use RouterOS tools effectively. The focus is on applying the results gathered from these tools into a firewall configuration to enhance troubleshooting skills. It's not intended as a practical implementation for real-world scenarios but rather as an educational example. Thank you for your detailed comment and for sharing your feedback!

[@sammourad4757]

Great explanation. Looking forward for the upcoming.

[@MikroTikCanada]

Dear Sam Mourad, Thank you for watching! Hope you’ve found it useful! Stay tuned for more and give us your future feedback!