Me again

How can I realize this rule on mikrotik webif?

Ok, fragmented packets can be filtered - see above.

What's about other invalid packets? How can I filter these?

How can I realize a SYN-flood protection?

How can I realize a "fail2ban" protection - banning IPs for some time like fail2ban makes it?

Ok, clear. I only will permit requests outside via port 67 and the input on port 68, then I have "double security". ;-) But do you have a rule for outgoing DHCP request? Is there a simulator available to check and simulate all firewall rules? If the firewall rulelist has a lot of entries i...

Thanks, very much.

When I setup a DHCP client on the WAN interface, do I also must add the firewall ruleset for port 67/68 for a dhcp-request or will this rule added in background?

This video is also very helpful - https://www.youtube.com/watch?v=ulDefmf1ces

Thanks. I added all my rules from my old router and a rule which drops fragmented packets. Which other rules should/could I add to raise the security? Why there are no good and full examples of rulesets for mikrotik routers on the web? Could anyone please post a typical WAN/LAN/DMZ1/DMZ2 ruleset? :-...

Ok, thanks.

Where can I find informaton about rules which makes a firewall secure?

Are there some examlples of rulesets for mikrotik or iptables?

I always block all the traffic and then I set the rules for connection which are allowed. Why should the inverse way better?

I am a iptables-newbie.
Here I have a screenshot of my actually rules from my old router.

Could you please help me to implement this rules to my mikrotik-router?

How can fragmented packets be dropped with iptables?

Hello, I have some question: My OpenWrt routers have per default about 20 rules for securing the WAN/LAN ports. On most mikrotik tutorials I always saw that there are only few rules necasarry (see attached ruleset). On OpenWrt invalid packets must be filtered seperatly - how does it work with mikrot...