Community discussions

MikroTik App
 
User avatar
rilliam
newbie
Topic Author
Posts: 48
Joined: Thu Mar 12, 2009 7:34 pm

drop second WAN IP remote access

Tue Jun 09, 2020 7:46 pm

I have two WAN IPs and would like to disable winbox access on the second IP address. Can someone tell me how to do this?
 
User avatar
Joni
Member Candidate
Member Candidate
Posts: 158
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: drop second WAN IP remote access

Tue Jun 09, 2020 7:55 pm

Firewall?
Block input to second address and port?
https://wiki.mikrotik.com/wiki/Manual:IP/Services
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 22241
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: drop second WAN IP remote access

Tue Jun 09, 2020 8:06 pm

There are number of ways to limit access to the router via winbox.
First change default winbox port
LImite access to the router via INPUT Chain rules
Limit access to users to specific subnets or IPs
Limit macwinbox server to specific interfaces
Limit winbox access vie IP Services.

The more important question though is how are you accessing winbox right now using WANIP.
Assuming you are attempting to config the winbox while away from its location?
If so, winbox is not the safe and recommended method anyway.
Winbox inside a VPN tunnel is the right way to do this