MikroTips: How to firewall

This video will give an overview of a MikroTik firewall. What rules are there by default, what do these rules do and how to make your own.

00:00 Intro
01:00 Firewall filter rule list
03:14 Firewall chains
06:32 Default rules overview
09:45 Add your first rule
15:56 Blocking webpages with MikroTik RouterOS
20:55 Learning more

[eferkano]

the "let say i trust my colleagues, even though i don't" part really made my day

[dzejkobone]

Shouldn't the 6th rule with IP 150.140.130.13 be moved upper? When firewall sees a rule for .13 it will accept it because it belongs to 150.140.130.0/24 network. Then router will stop looking for filter for this IP, because it has been already accepted. So in my opinion the trick is to move this rule up (on position 5 or smaller) to block the .13 address, and then firewall will stop looking for filtering, because it has been already blocked.

[TheNetworkBerg]

Great content Normis & MikroTik :)! Please keep these awesome MikroTips coming, I know many people enjoy watching them!

[rufst]

There is a mistake @15min, the drop rule will not work since the connection will be accepted by the rule preceding the drop.

[sebastianmangelsen]

I can not agree more, great content and please continue in the same way supporting customers. My journey with Mikrotik has been a pure pleasure so far.

[AlexApol]

The documentation and tutorials for Mikrotik put all of the other manufacturers to shame. Looking at you Ubiquiti!

[JSBroadcast]

As many have said, those are really useful videos, so please, keep them coming. I've worked as a MT admin 13 years ago and I forgot a lot of this stuff since then, so this makes the onboarding again really simple. Thank you very much.

[JeffPedlow]

This is a great starter/intro video to the FW and I sincerely hope there are more for the future - perhaps topics like point to point VPN, home AP, throttling Kids devices etc...

[nadtz]

As someone about to pick up my first mikrotik device this was a great beginner how to vid for the much feared firewall config, thanks!

[xaviertorres]

It was a good starting for MIKROTIK FIREWALL, thanks by this approaching to the comunity!

Great job!

[kolifx]

Really good to see tutorials like this, keep going, make more. You have a great product range with great features, however features bring complexity. I feel the biggest hurdle for your home users to be able to use your gear will be the lack of knowledge. Tutorials will be a huge help for people to learn and buy more of you great gear.

[sestoscemo]

Thank you! Can't wait for next video. Bying a Mikrotik router for home was a great choice. Forced me to an extrmely interesting study process

[andrejscernusenko]

Thanks, excellent video for first steps in firewall. Watching 20 minutes of long video was not boring. Thank you Normis!
It takes a lot of courage to make good videos, but you are doing great! Keep up ;)

[mantaspudzemis]

I love mikrotik routers and support material has improved a lot too now. Great job

[rajeshbose]

please discuss about advance firewall some other day. we are waiting. Thnaks

[yevheniistoliarenko]

Hmmm just to clarify
On 15:27, will rule #6 for blocking X.X.X.13 actually work?
Preceeding rule #5 is accepting whole subnet traffic...

[kollerpaul]

Well done! Keep it up.

Is this the new Mikrotik Logo?

[cabonamigo]

I wish people in the industry were as sincere as you were, from the beginig (windows 95 begginig) by saying : "No network is completely secure..." . What you said kind of defies the reason to why choose mikrotik instead of any other, but anyway, also a great reason for a "heck, why not !" right ?

[qmdzdnh]

Nice, Great to know about the SAFEMODE feature.. to me it means not to reset my router and getting kicked out of it when ever i'm experiencing with the ip adressess things XD
thank you sir

[UlrichWessendorf]

I appreciate such videos, but I miss IPv6 Firewall Rules. Many people use IPv6 in their home routers because of missing IPv4 addresses (e.g. DS-Lite). Could you do an advanced video about firewalling with IPv6?