Full MikroTik MTCNA - Firewall Principles (Forward,Input,Output)

[@JordanEE]

Man, God Bless, watching your video series has taken me from "RouterOS is too complicated for me to work with" to " I can work with this and learn it".

[@TheNetworkBerg]

I am so happy to read that, it really makes me feel like creating this series was worth it since it has helped others in the same way

[@zl0y]

You are really cool man! I watch your videos and study Mikrotik a little and set it up at work, since there is no time to study formally, and there is no money! Thank you! Hello from Kazakhstan!

[@tanawalgeneraltransport639]

God bless you i am a fresher and learnt much more than expectation,

[@ColDesignLLC]

Thank you so much. Your great knowledge and teaching talent are truly appreciated.

[@Greyam-cm2gt]

love this

[@cybersecurity4052]

Love you networkberg.

[@reanitkhmer3325]

I have learnt a lot from your channel. Thanks

[@TheNetworkBerg]

Glad to hear that! Hope I can continue teaching more people :D!

[@umiseaz]

Thanks for this tutorial very informative

[@TheNetworkBerg]

Glad it was helpful!

[@grizzlah]

Cool intro mate.

[@TheNetworkBerg]

Hey, thanks!

[@kongpanha1816]

big thx for your share this videos.

[@Mi_Fa_Volare]

Can you show how to make timeout rules for https INPUT against brute-force?

[@prettysheddy]

I better understand the input and output rules now. Some of those rules are typically implicit rules when using a checkpoint.

[@MB-xh3tv]

Why does the router say on action DROP (on it self) rejected? And does NAT masquerade traffic with a bridge and (I know there is a difference) how about without a bridge but with NAT masquerade active?

[@tiyans]

do you have a vid about theory of prerouting, postrouting and stuff

[@TheNetworkBerg]

No, though that might be a good video to create. Will note it down and see if I can get around to it when I have a moment after finishing the other videos I have planned :)

[@ramakrishnante]

Could you tell how to disable scanning option (example from one mobile to another mobile through QR code connect wifi)

[@nohopepope]

What process would be used to completely isolate WLAN clients from each other? I'm going to bridge my 2Ghz and 5GHz bands and I don't want the devices on my guest router to be able to talk to each other at all.

[@TheNetworkBerg]

You can configure VLANs, will see if I can get a video created around the subject

[@kongpanha1816]

one more if we want to know or calculate user support with MikroTik so what i have to do brother.

[@simplicity946]

how to setup firewall-nat to accept remote acces RDP only with VPN, i create a pool for vpn but how to accept remote acces just for vpn pool or address list

[@Martin-ot7xj]

Hi there, how to make a roll in the Mikrotik firewall that blocks from outside or internet to our Mikrotik router and network but our computer in the network can access the internet for more security ??? thnx

[@TheNetworkBerg]

MikroTik firewalls are stateful, meaning if you add rules from your LAN to the internet that the traffic will be allowed. If you want to block traffic to your router you will use the input chain and then specify what traffic you want to block, same for networks behind the MikroTik except you will use FORWARD chain to drop/block those packets.

[@Martin-ot7xj]

sorry, but i didn't get your point !!!i have a Lan , i want everyone from my lan can access to the internet, but from internet, nobody can access to mt lan for more security.

[@Martin-ot7xj]

i think like your network as you have mentioned in your video. if you have a computer behind your Mikrotik and if you want to set a roll firewall Mikrotik that your computer can access to the internet, but no one from the internet can access to your pc for more security. you must set a roll as input chain and source ip :Any , Destination ip : your router ip and on in. interface you must select ether1 WAN? AMI I right? if you are going to do that .we can add a roll on firewall for more security

[@TheNetworkBerg]

@@Martin-ot7xj I highly suggest speaking to a consultant to help you with what you are trying to configure, you can find a list of consultants on the MikroTik website here: mikrotik.com/consultants