MikroTik Disable and Lockdown Default Services

This guide is how to disable and lockdown services enabled by default in RouterOS. This guide assumes you are accessing from the LAN subnet of 192.168.60.0/24.

1. Disable and IP limit all services connecting to the MikroTik.
   • /ip service
   • set telnet disabled=yes
   • set ftp disabled=yes
   • set www disabled=yes
   • set ssh address=192.168.60.0/24
   • set api disabled=yes
   • set winbox address=192.168.60.0/24
   • set api-ssl disabled=yes