MikroTik RouterOS
Firewallmikrotik-routeros
Router and firewall operating system for MikroTik devices whose filter chains accept any packet that matches no rule.
- Provider
- default
- Kind
- Firewall
- Category
- Security
- Official docs
- https://help.mikrotik.com/docs/spaces/ROS/overview
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| connectionTracking | boolean | — | no | true | inherited |
| defaultAction | enum | allow | deny | no | — | ▸ allow |
| intrusionPrevention | boolean | — | no | — | ▸ false |
| logging | boolean | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ false |
| module | enum | filter | mangle | nat | raw | no | filter | inherited |
| ruleCount | integer | — | no | — | inherited |
| stateful | boolean | — | no | — | ▸ true |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "mikrotik-routeros", component: "mikrotik-routeros" }Cloud Firewallalibaba-cloud-firewallNetwork ACLalibaba-network-aclECS Security Groupalibaba-security-groupNetwork ACLaws-network-aclAWS Network Firewallaws-network-firewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallSecurity groupaws-security-groupMicrosoft Entra Internet Accessazure-entra-internet-accessAzure Firewallazure-firewallNetwork Security Groupazure-network-security-groupNetwork security perimeterazure-network-security-perimeterCloudflare DNS Firewallcloudflare-dns-firewallCloudflare Gatewaycloudflare-gatewayCloudflare Network Firewallcloudflare-network-firewallGeneric firewallfirewallFirewall appliancefirewall-applianceFortinet FortiGatefortigatenftablesnftablesOPNsenseopnsensePalo Alto Networks NGFWpalo-alto-ngfwpfSensepfsenseSnortsnortSuricatasuricataVyOSvyosDigitalOcean Cloud Firewallsdigitalocean-cloud-firewallCloud IDSgoogle-cloud-idsCloud NGFWgoogle-cloud-ngfwSecure Web Proxygoogle-secure-web-proxyIBM Cloud Hardware Firewallibm-firewallVPC Security Groupibm-security-groupNetworkPolicyk8s-network-policyNetwork Firewalloci-network-firewallNetwork Security Groupoci-network-security-groupSecurity Listoci-security-listSecurity Groupoutscale-security-group
# yaml-language-server: $schema=../../schema/component.schema.json # MikroTik RouterOS: the operating system of MikroTik routing devices ("RouterOS - MikroTik # Documentation"). "Firewall - RouterOS - MikroTik Documentation" states the firewall does # stateful filtering by utilizing connection tracking as well as stateless packet filtering, and # that a packet which has not matched any rule within the chain is accepted, so the shipped # posture is allow. No intrusion prevention module appears in the firewall documentation. schemaVersion: "1" type: "component" id: "mikrotik-routeros" kind: "firewall" provider: "default" docs: "https://help.mikrotik.com/docs/spaces/ROS/overview" defaults: managed: false defaultAction: "allow" stateful: true intrusionPrevention: false properties: connectionTracking: type: "boolean" default: true module: type: "enum" values: ["filter", "mangle", "nat", "raw"] default: "filter"