MikroTik security findings, explained
Every finding the audit can report has its own page: what it means, why it matters, what it looks like in Winbox, and the exact RouterOS commands that fix it. Written for people who run a MikroTik router, not only for security specialists.
SNMP community with write access
An SNMP community with write access lets anyone who knows the community string change the router's configuration, and with SNMP v1 or v2c that string travels across the network in cleartext. Almost no monitoring setup needs this; here is how to remove it.
SNMP still uses the default community "public"
The community string is the password for SNMP, and "public" is the one every scanner tries first. Anyone who can reach UDP port 161 can read your interfaces, addresses, ARP table and traffic counters. Here is how to replace it and lock it down.
SNMP reachable from the internet without an address restriction
SNMP tells a monitoring server everything about your router — interfaces, addresses, neighbours, traffic. Without an address restriction it tells the same to anyone on the internet, and it is a favourite amplifier for DDoS attacks. Two settings close it.
New article every other day · RSS