Doing this speeds up the connections and also reduces processor overhead on the router. Untracked connections (more like VIPs with diplomatic passports) should also be allowed to go through. Likewise, all connections related to these connections (established), should as well be allowed to come in or go through without vetting. This filter rule speeds up connections by ensuring that vetted and established connections to/through the router should not go through the vetting processes again. Accept established, related, and untracked connectionsĬhain=input action=accept connection-state=established,related,untrackedĬhain=forward action=accept connection-state=established,related,untracked At the end, the system requirement determines what rule should stay or go. I will go over some of the firewall filter rules included in the residual configuration on Mikrotik RB951Ui and explain the advantages/disadvantages. The commands here, though meant to make your job easier, can complicate things for you if you do not understand the functions of each rule. The firewall sub menu on a Mikrotik router houses the most important part of the RouterOS defualt configurations and as such, will be focused on in this post. RouterOS default configuration in firewall RouterOS default configuration commands are slightly different across selected Mikrotik routers.

These devices include RB750, RB950, some Mikrotik SXT series, etc. Since Mikrotik have realized that not all organizations are willing to employ an in-house IT officer who is saddled with the responsibility of configuring all network devices including routers, they resolved to simplify the task for these organizations by making sure that RouterOS default configuration is embedded on all Mikrotik small-office/home-office devices.

Isn’t it? Is this really a good practice? Why did Mikrotik do this? Read on.

Because of Routeros default configuration, an administrator can simply plug in a broad band connection from an ISP and, with little or no configuration on the Mikrotik router, connected users behind the router can access the internet. These configurations include commands for fasttrack a feature in RouterOS that speeds up connections, firewall rules that protect the router from external aggressors, NAT rules and dhcp server for LAN users.

Mikrotik default firewall