This guide is how to disable and lockdown services enabled by default in RouterOS. This guide assumes you are accessing from the LAN subnet of 192.168.60.0/24.
- Disable and IP limit all services connecting to the MikroTik.
- /ip service
- set telnet disabled=yes
- set ftp disabled=yes
- set www disabled=yes
- set ssh address=192.168.60.0/24
- set api disabled=yes
- set winbox address=192.168.60.0/24
- set api-ssl disabled=yes