Page 1 of 1

HELP! Mikrotik router is accessible from outside

Posted: Mon Sep 20, 2021 1:02 pm
by Datanav
HELP! Mikrotik router is accessible from outside but there are no rules to allow the same. How is this possible?

Network description:
So we have a PPOE modem connection from ISP with a Public IP assigned to us. When you browse the public IP, the mikrotik page shows up. How do i remove this from the internet? i want to give that part of port 80 to another internal service. I don't need to access to mikrotik externally.

Re: HELP! Mikrotik router is accessible from outside

Posted: Mon Sep 20, 2021 1:08 pm
by memelchenkov
Mikrotik router is accessible from outside but there are no rules to allow the same. How is this possible?
There is only one possibility: misconfiguration.
Show your config.

Re: HELP! Mikrotik router is accessible from outside

Posted: Mon Sep 20, 2021 1:36 pm
by rextended
You have tested the public IP inside your LAN, or you have used another connection to test it?

Re: HELP! Mikrotik router is accessible from outside

Posted: Mon Sep 20, 2021 1:37 pm
by Sahafi2001
HELP! Mikrotik router is accessible from outside but there are no rules to allow the same. How is this possible?

Network description:
So we have a PPOE modem connection from ISP with a Public IP assigned to us. When you browse the public IP, the mikrotik page shows up. How do i remove this from the internet? i want to give that part of port 80 to another internal service. I don't need to access to mikrotik externally.
If you want to turn off access to the router via the browser, paste the command in the terminal
 ip service disable www 
Or if you want to change the port number from 80 to any number you want, use the following command. *I use the port number 49867 in the example
ip service set www port=49867
Or If you want to stop connecting to your mikrotik remotely, use the following command
ip cloud set ddns-enabled=no

Re: HELP! Mikrotik router is accessible from outside

Posted: Mon Sep 20, 2021 2:46 pm
by anav
please post config
/export hide-sensitive file=anynameyouwish