Scribd Logo
Upload

Welcome to Scribd!

  • Knocking Mikrotik

    Uploaded by

    Kikuo Ibe
    7 views2 pages
    This document provides instructions for configuring port knocking on a Mikrotik router. It describes adding firewall rules to add client source addresses to address lists if they connect to specific TCP ports, with timeouts ranging from 30 seconds to 1 hour. It also details adding rules to drop ICMP ping, common TCP ports, and traffic to the modem IP if the source address is not in the final "Open-Door" address list.

    Original Description:

    Port Knocking Mikrotik

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document provides instructions for configuring port knocking on a Mikrotik router. It describes adding firewall rules to add client source addresses to address lists if they connect to specific TCP ports, with timeouts ranging from 30 seconds to 1 hour. It also details adding rules to drop ICMP ping, common TCP ports, and traffic to the modem IP if the source address is not in the final "Open-Door" address list.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    7 views2 pages

    Knocking Mikrotik

    Uploaded by

    Kikuo Ibe
    This document provides instructions for configuring port knocking on a Mikrotik router. It describes adding firewall rules to add client source addresses to address lists if they connect to specific TCP ports, with timeouts ranging from 30 seconds to 1 hour. It also details adding rules to drop ICMP ping, common TCP ports, and traffic to the modem IP if the source address is not in the final "Open-Door" address list.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 2

    Port Knocking Mikrotik

    21 August 2019 22:53

    1. IP - FIREWALL - FILTER RULES


    Add -> Chain : input -> Protocol : tcp -> Dst. Port : 1010 ->
    Action : add src to address list -> Address list : Open-1010 ->
    Time out : 30 detik

    2. IP - FIREWALL - FILTER RULES


    Add -> Chain : input -> Protocol : tcp -> Dst. Port : 2020 ->
    Action : add src to address list -> Address list : Open-2020 ->
    Time out : 30 detik ->
    Advanced -> Src. Address List : Open1010

    3. IP - FIREWALL - FILTER RULES


    Add -> Chain : input -> Protocol : tcp -> Dst. Port : 3030 ->
    Action : add src to address list -> Address list : Open-Door ->
    Time out : 01:00:00 ->
    Advanced -> Src. Address List : Open2020

    Blocking PING
    Add -> Chain : input -> Protocol : icmp -> Action : Drop
    Advanced -> Src. Address List ! Open-Door

    Blocking SERVICES
    Add -> Chain : input -> Protocol : tcp -> Dst. Port :
    21-23,8291,8728,8729 -> Action : Drop
    Advanced -> Src. Address List ! Open-Door

    Blocking MODEM
    Knocking Mikrotik Page 1
    Blocking MODEM
    Add -> Chain : forward -> Dst. Address : IP Modem ->Protocol :
    tcp -> Dst. Port : 80 -> Action : Drop
    Advanced -> Src. Address List ! Open-Door

    Knocking Mikrotik Page 2

    You might also like