u/merith-tk

Security Firewall Rule Cut off Internet

So figured I would share my frustration!

The other day I pushed an update to the on site mikrotik routers configs, mainly updating all the firewall rules to make sure everything was working!

In my configs was this line

```

add chain=input action=drop in-interface-list=LAN comment="[MGMT][DROP] Block management from LAN"

```

It is worth noting all routers that are physically restricted access (locked in a cabinet) have a seperate port configured, dedicated for management of the device, firewall rules blocking stuff don't apply to this port on this device.

This rule, as it's comment suggests, is meant to block access to the router for management reasons, so rouge devices can't attempt to poke or prod it.

I... At the time of writing this rule I thought it was a good idea, and then I realized... After the fact, after the issues.

This rule blocked all traffic going to the router. AND THROUGH it... It killed the internet underneath the router.

reddit.com
u/merith-tk — 4 days ago