Уровень 0 · материалов: 6
В кластер включаются документы по защите и оптимизации устройств MikroTik, но не включаются инструкции по безопасности для других операционных систем или серверов.
Общие признаки: настройка MikroTik RouterOS, защита от брутфорс-атак, конфигурация межсетевого экрана, безопасность сетевого доступа
Группа выше: Уязвимости сетевой инфраструктуры
Смысл: The main idea is to use a Mikrotik router as a first line of defense by implementing a 'honeypot' mechanism that automatically bans any IP attempting to access common attack ports, thereby proactively blocking brute-force attackers and scanners before they can reach actual services.
The author demonstrates how to use Mikrotik firewall rules to create a honeypot that automatically blacklists IP addresses attempting to access common ports, effectively stopping brute-force attacks and port scanning.
Смысл: The main idea is that the power and flexibility of Mikrotik RouterOS make it a prime target for hackers when not properly secured. The author argues that basic security hygiene, specifically a strict firewall, is the only effective defense against the widespread recruitment of these devices into botnets.
An IT enthusiast secured 100,000 vulnerable Mikrotik routers from botnets and provides a detailed guide on common RouterOS exploits and defense strategies.
Смысл: The main idea is to demonstrate the technically optimal way to implement website blocking on MikroTik hardware by using the Mangle table to mark traffic before dropping it in the filter, thereby avoiding the performance degradation associated with naive Layer7 filtering.
A technical guide on efficiently blocking websites on MikroTik routers by using Layer7 protocols combined with connection and packet marking in the Mangle table to preserve CPU performance.
Смысл: The main idea is to secure RDP remote access for small organizations using Mikrotik routers by implementing a Port Knocking mechanism, thereby hiding the RDP port from the public internet and protecting it from brute-force attacks and scanners.
A technical guide on using Port Knocking on Mikrotik routers to securely open RDP access only for authorized users who trigger a specific port sequence.
Смысл: The main idea is that securing a MikroTik router requires a multi-layered approach (Defense in Depth) that goes beyond simple passwords, involving the hardening of management access, physical interface control, and the mitigation of common Layer 2 protocol vulnerabilities like ARP spoofing and rogue DHCP servers.
A technical guide on hardening MikroTik RouterOS devices through management access restrictions, L1 physical security, and L2 protocol protection against MITM attacks.
Смысл: The main idea is to provide a practical guide for home and corporate users to secure and optimize their MikroTik RouterOS devices without needing to wipe the default configuration, focusing on firewalling, service restriction, and network hygiene.
A technical guide on hardening MikroTik RouterOS security and optimizing network settings starting from the Quick Set configuration.