Hi, I've used a RB750 and a RB2011, and both are really easy to setup using quickset for home NAT internet firewall usage.
I've now switched to a CCR1009, in order to get higher throughput after upgrading my internet connection speed to 300Mbps, but the CCR comes with very little in terms of default quickset scripts.

I looked at the scripts section, and this seems like a good place to start:
http://wiki.mikrotik.com/wiki/A_script_ ... ou_started

My concern is that in replacing the RB2011 with a CCR1009 and using my own configuration scripts, I inadvertently expose my network to attack.
I'd appreciate any recommendations on helping me to get started.

P.

why don't you put the same ROS on both routers, export the config from RB2011 on a file, edit if needed and import it in the CCR.

cheers

That is one of the options I am exploring (I exported the quickset config and default config from a RB2011), please see this post for the various sources of firewall configs I have found:
http://forum.mikrotik.com/viewtopic.php ... 11#p432211

As I've found various slightly different recommended firewall configs, I'm looking for explanations of differences, or what it "should be" config.

P.

there is no such things as recommended firewall. Firewall is configured by each network admin based on network requirements.
If you don't know what each rule do i suggest you don't start to copy / paste what you find on the internet. You can stick with the basic firewall mktk provides and take it from there, start adding and modifying rules.
firewall exported from any mktk router should work on any mktk router unless you use mangle per interface and the interfaces are different.

cheers