Firewall and Quality of Service
This section covers RouterOS firewall, NAT, connection tracking, queues, packet flow, and QoS features. Use it to secure traffic, classify packets, and control bandwidth or forwarding behavior.
Firewall
6 items
Packet Flow in RouterOS
This page explains how data packets flow through MikroTik RouterOS, detailing the interaction between bridging, routing, MPLS decisions, and firewall chains. It includes diagrams illustrating packet processing stages from entry to exit points, along with descriptions of key components like routing tables and firewall chains.
Connection tracking
Connection tracking in MikroTik RouterOS enables stateful firewall functionality by monitoring logical network connections, supporting NAT and various firewall features. It assigns packets to states like new, established, related, invalid, or untracked, with FastTrack optimizing TCP/UDP packet forwarding.
Queues
5 items
Kid Control
Kid Control is a RouterOS feature allowing parental control over LAN devices by setting daily internet access schedules, bandwidth limits, and device-specific restrictions through profiles and firewall rules.
NAT-PMP
NAT-PMP lets LAN clients learn the router's external IPv4 address and request port mappings, so applications accept incoming connections behind NAT without manual port forwarding. Covers enabling the RouterOS NAT-PMP service and assigning external and internal interfaces.
UPnP
Universal Plug and Play (UPnP) in RouterOS: an Internet Gateway Device service that lets LAN applications request port mappings. The router creates dynamic destination NAT rules for the requested ports. Covers enabling the service, marking external and internal interfaces, and the security implications.
User Guides
5 items