Hi all,

I would like to block/disable the option for being able to connect to my RouterOS config from my Public/external IP.
I would want to only be able to login from my internal IP.

As I am seeing a lot of connections trying to login into my RouterOS by the Public IP I have.

Thanks in advance for your help.

You need to drop input traffic on your WAN interface(s). Be careful, if you get it wrong you might block access yourself.

Safe mode is your friend.

Build your firewall rules something like this

ros code

/ip firewall filter
add chain=input connection-state=invalid action=block comment="Block invalid packets"
add chain=input connection-state=established comment="Allow packets for established connections"
add chain=input connection-state=related comment="Allow packets for related connections"
add chain=input in-interface=<your local internal lan> comment="Allow packets coming from your local/internal lan"
add chain=input action=block comment="Block all other traffic"

Restrict access to router using 'IP/Services' as described here:
http://wiki.mikrotik.com/wiki/Manual:IP/Services

HTH,

Thank you guys! Got it working much appreciated