Help setting up RouterOS firewall!

[acidrain]

Hi guys,

Can any help me find a suitable and in-depth manual for setting up the routeros firewall. Ive searched on the wiki ( which is very useful ) but most of the examples looks like it was done through telnet and have all these codes flying around which unfortunately i dont understand ( since my understanding of linux is very small )

I use winbox to access the router which is why im trying to find information on the web where the step-by-step guides are done in winbox aswell.


Thanks

 

[KillerB]

what are you trying to do with the firewall???

 

[acidrain]

what are you trying to do with the firewall???

Basically this is what we want to achieve on our network:
1. Block all UDP ports except ones required for programs such as zFTP

2. Found a wiki to enable the firewall to autodetect infected or spammer users and temp block their SMTP output but the problem comes in the tutorial where, to log the detected users, you must write some sort of script using hotspot and i have no clue how to use hotspot ( unless there is another way to log the users )

3. Also want to block things such as "echo requests" which afaik uses port 2, block vurnerable tcp ports.....

Im hope you get the drift of what im trying to achieve, basically close everything we dont use and keep the ones open that we do.

Also app there is a queue that the packets follow i.e:
incoming --- NAT --- chain ---- etc and i also am not clued up on NAT so i wouldnt know where to start with using it.

 

[acidrain]

Come on..... someone has to know something

 

[Plaasjapie]

For Free ?

you want this help for?

 

[acidrain]

you want this help for?

I sense $$$ is coming to the equation anyways, but dont worry, after this past w/e staying up late, i found all i had to do was open up a new terminal, type /ip firewall filter and then copy and paste the code i required for my filters.....

....sooooo long story short, eventually found the help i needed

 

[Kloon]

Mikrotik wiki is very usefull

 

[acidrain]

Mikrotik wiki is very usefull

Yeah i know, thats what i was using, i just couldn't figure out what to do with the code or how to use it... until i was told to copy and paste in new terminal.