Port Knocking & Scanner Detection - Mikrotik Firewall Ep 3

#MikroTik #PortKnocking #PortScanningDetection
Explore two crucial network security techniques in MikroTik RouterOS: Port Knocking and Port Scanning Detection. Port Knocking adds an extra layer of security by allowing access only to those who know the secret 'knock,' while Port Scanning Detection helps identify and thwart potential threats. Strengthen your network security today! Watch the video now. 🔒💻
Check more videos on my channel
/ @thenetworktrip
Connect with Wilmer Almazan
LinkedIN: / wilmeralmazan
Facebook: / nsswilmeralmazan
Twitter: / wilmer_almazan
Instagram: / wilmer_almazan
Personal Blog: thenetworktrip...
mikrotik
routeros 7
ospf
mtcna
mtcre
cybersecurity
routing
cloud computing
virtualization
switching
network automation

[@TheNetworkTrip]

🔒 How’s your Port Knocking strategy, eh? Share your thoughts on this security technique! 💬💡On my next video, we will use the RAW table to improve even more the current setup

[@djdj-jz9ds]

Place port scanning block rule in RAW/prerouting chain - it will save CPU resources. Place PSD rule in Input chain under "Allow Established, related rule". Consider to exclude from PSD process ports that are port knock process targets - PSD may prevent PK to work. Greate video. I appreciate Your work. Best regards ;)

[@TheNetworkTrip]

Thanks! I’ll talk about the Raw table in one of the upcoming videos on this series. I’ve just touched the surface until now (Ep 3 out of 25)

[@sebastiendeliedekerke5251]

Are there any Windows-based apps to automate the port knocking sequence?

[@TheNetworkTrip]

Hello! There are some options like the following Python resource: github.com/grongor/knock or www.epinox.de/en/windows/port-knocking-tool.html

[@Litdex]

mo effective to drop port-scanners traffic in RAW tab (prerouting) even before firewall rules. CPU will say thanks :)

[@TheNetworkTrip]

That’s correct! 100% agree. The Raw Table is coming next in the series.

[@mich4u]

Can you make port redirection using port knocking?

[@TheNetworkTrip]

Hello! If the redirection is using different port numbers, yes

[@antovinny7405]

Great video, thank you. Could you please add a video on DDOS protection

[@TheNetworkTrip]

Thanks! I’ll go over different types attacks in this series. More videos coming soon

[@ratnakarkoli5609]

Hey Liked the video on firewall. Nicely explained. Can you give something on Mangle Tables ?

[@antonio_castro_ve]

Wilmer impecable como siempre, gracias por compartir tus conocimientos. Tengo una pregunta referente al Firewall y sus reglas. Noto que tu FW básico no tiene al final una regla que bloquee en la cadena de forward como lo haces con el input. Pregunto, no hace falta?. Gracias

[@TheNetworkTrip]

Hola, Esta es una serie de vídeos sobre el firewall en Mikrotik. Por el momento solo he hablado de input.

[@antonio_castro_ve]

@@TheNetworkTrip Aahh ok, estaré atento a tus próximos videos. Gracias por responder.

[@enricoschiappa3643]

Hello there! Congatulations for a great video and tips for securing the MK router, specially in my case where I have a static public IP on it. One question: how can I set up on Winbox an exception rule to allow port scanning only from my LAN and or specific public Ip?

[@OstJoker]

Do something with volume levels at the end of the video.

[@TheNetworkTrip]

Thanks for letting me know. I’ll fix it

[@tallyharry3704]

Thank you sir, you video are amazing... there is something I did recently on a mikrotik device n I lost access to the device, on the forward chain I drop everything else, and there are other fire rule I added but can't remember what I did.

[@edekedkowski5952]

Mr. Wilmer, where are the next firewall series? There hasn't been a video on the channel for a long time... Regards.

[@alimibrahem8120]

as always so thansful Mr.Wilmer...!!! sincerely.

[@TheNetworkTrip]

You are very welcome

[@ZX-8Bits]

Fantastic! Thanks for sharing, simple, small and very clear! I just have successfully get implemented port-knocking, but no PSD until now. Greetings from Rosario, Argentina. I'm follow You!

[@TheNetworkTrip]

Fantastic!

[@tallyharry3704]

I love your video...

[@TheNetworkTrip]

Thank you!😊

[@jeytis72]

Very clear. keep up the good work. Thanks

[@TheNetworkTrip]

Thanks, will do!

[@cybervlado]

Well-structured and thorough material. We await the sequel.

[@TheNetworkTrip]

Thank you, I'm glad to hear that!

[@bushcraft.azerbaijan]

thank you

[@TheNetworkTrip]

Thank you too!

[@hotforex4435]

how block netshare app please guide me

[@mikkio5371]

Also firewall ( security) is an important topic to all expeciailly to those who uses mikrotik. This will draw alot of attention to your KZbin page . Weldone once more and thanks

[@TheNetworkTrip]

Security must always be implemented in out networks. Thank you 👍🏻

[@Smoothy0911]

Dear Mr. Wilmer, many thanks for this 3. video. I learned a lot by this video series and am impressed by the options that can be configured. Keep it up, I look forward to more great videos👍

[@TheNetworkTrip]

Thank you!

[@eugeneagola4633]

I just subscribed to your channel the other day am new in mikrotik i know this channel will be so helpful to me thanks man 👊👊

[@TheNetworkTrip]

Thanks!

[@kresimirpecar4925]

Excellent videos, good series here, lot of people doesn't think about router security or they are thinking it won't happen to them.

[@TheNetworkTrip]

100% agree! Thank you

[@mikkio5371]

Knock knock Mr Wilmer 😅 . Port knocking has never been made this easy . I basically put your page on full alert to be recieving all you content . Thanks and thanks for a well explained presentation ❤❤❤❤

[@TheNetworkTrip]

Thanks 😃

[@IG2296]

Useful information. You are a good teacher and amazing engineer. I am glad that i found your channel on youtube.

[@TheNetworkTrip]

Thank you very much!

[@eugeneagola4633]

😀😀😀 I LIKE THIS , THI IS NICE😋😋

[@eafrus]

Спасибо!

[@samerkabalan8571]

Thank you ♥

[@PetervanderPlaat]

Thanks for this excellent and usefull video

[@khx73]

Hope you are going to continue this series. Thank you

[@raminrajabioskouei781]

Good job.

[@TheNetworkTrip]

Thank you!