Securing Mikrotik: checklist

9 Tips to Secure your router: https://www.phallaccmt.com/2018/03/143-mikrotik-how-to-secure-your-router.html

1. Not using default username/password = ok

2. Using complex password = ok

3. Allow only specific user to access your router: /User (allow-address) = ok

4. Allow only used /ip service and change default port = ok

5. Disable Mac-telnet, Mac-Ping and Mac-Winbox: /tool mac-server = ok

6. Disable neighbor discovery protocol = ok

7. Disable BTest Server: /tool BTest-server = ok

8. Disable Allow Remote Requests: /ip dns = ok

9. Disable unuse interface/service = ok

Ref: https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router