Qnewbie

1. As a basic firewall rull, allow login with "admin" only from your local network, Allowed address from 0.0.0.0/0 to something like 192.168.88.0/24.
System => user, double click admin.

2. You can change your login name.
Add your own username to your router with same rights as admin(full) with winbox.
System => user => +

Qnewbie

One more thing, you can block brute force attacks after you change your username:

1. /ip firewall filter
   
2. add chain=input protocol=tcp dst-port=8291 src-address-list=winbox_blacklist action=drop \
   
3. comment="drop winbox brute forcers" disabled=no
   
4. 
   
5. add chain=input protocol=tcp dst-port=8291 connection-state=new \
   
6. src-address-list=winbox_stage3 action=add-src-to-address-list address-list=winbox_blacklist \
   
7. address-list-timeout=10d comment="" disabled=no
   
8. 
   
9. add chain=input protocol=tcp dst-port=8291 connection-state=new \
   
10. src-address-list=winbox_stage2 action=add-src-to-address-list address-list=winbox_stage3 \
    
11. address-list-timeout=1m comment="" disabled=no
    
12. 
    
13. add chain=input protocol=tcp dst-port=8291 connection-state=new src-address-list=winbox_stage1 \
    
14. action=add-src-to-address-list address-list=winbox_stage2 address-list-timeout=1m comment="" disabled=no
    
15. 
    
16. add chain=input protocol=tcp dst-port=8291 connection-state=new action=add-src-to-address-list \
    
17. address-list=winbox_stage1 address-list-timeout=1m comment="" disabled=no

複製代碼

Source: http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention with modification for winbox.

Qnewbie

Other basic firewall scripts might help you:

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

Scripts with following link might be modified after your need(be carefull!):
http://wiki.mikrotik.com/wiki/Basic_universal_firewall_script

Qnewbie

Just click OK, it is alright.

Qnewbie

"disabled=no" seems to be indicator to the packet processing for the firewall. I cannot find information from http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter.

Qnewbie

回復 14# vpn-learner
In winbox, you simply click "New terminal", a terminal pops up and you can use copy&paste these codes in #8 to build you firewall rules. Firewall works according to these rules. Script is saved in a file(winbox: system =>script) and executed by schedular or by hand.

Qnewbie

More info, see http://wiki.mikrotik.com/wiki/Manual:Console