Address List | Masquerading Firewall | Public IP Firewall | Instructions

Firewall Tool

This tool will help you create some basic firewalls for MikroTik routers as well as a stand alone address list that you can use with your own custom rules to block certain countries. To use the tool, follow the steps below.

Generate Address List Only


Step 1: Check the countries you want included in the address list. Scroll down for additional countries.



Step 2: Click this button to generate your stand alone address list for use with your own custom rules.




Address List | Masquerading Firewall | Public IP Firewall | Instructions

Generate a Masquerading Firewall


Step 1: If you want to generate a complete masquerading firewall, that is, if you use only private IP's on your LAN interface, this tool will generate a firewall that will allow access to the router from the LAN, block all access to the router from the WAN and block access to any country you select in the list above for all computers connected to the WAN.

LAN Interface Name:

Step 2: Click this button and save the file to your computer. Then proceed to Step 3.




Address List | Masquerading Firewall | Public IP Firewall | Instructions

Generate a Public IP Firewall

Step 1: If you use Public IP's on your LAN interface, and need to allow access for inbound services to these hosts, this section will create a firewall that blocks all countries in the list above to the router itself and the hosts on the LAN. Please note that if you have a mixture of both public and private IP's on your LAN, you will need to understand firewalls more fully and develop your own as this tool does not yet support that configuration.

LAN Interface Name:

Step 2: Click this button and save the file to your computer. Then proceed to Step 3.




Address List | Masquerading Firewall | Public IP Firewall | Instructions

Install Your Firewall

Step 3: Use the following tutorials to install your firewall or IP address lists.

Tutorial 1: How to Import Your New Configuration

The tools above will present you with a script file you can download to your computer. Once downloaded, copy the file to your router's files list and import from the comand line. This tutorial will show you how to import the configuration script file you just downloaded.


Tutorial 2: Using theMikroTik Configurator for a Masquerading Firewall and Country Address List

This video will teach you how to use the MikroTik Configurator to install a simple but effective firewall. This specific example is for the Masquerading firewall to be used with typical LAN networks employing private IP space. Generate Masquerading Firewall" will generate a simple MikroTik RouterOS firewall that will block anyone from outside your LAN from accessing your router and will block access from your LAN to all countries you selected in the list. This short tutorial will show you how to use our tools to create a simple but but very effective firewall that will not only protect your LAN from unauthorized access, but allow you to block traffic from your network to certain countries.


Tutorial 3: How to Use an Address List

Note that "Generate Address List" will generate only the address list which does nothing without a firewall rule to use it. Examples of how to use this address list are availe in this short tutorial.


Tutorial 4: Understanding the Public IP Space Firewall With a Country Address List

"Generate Public Host Firewall" will generate a simple MikroTik RouterOS firewall that will block any country on your list you selected from accessing your router and will block access to hosts on your LAN interfaces. The difference between the Masquerading Firewall and the Public IP Address firewall, is that the assumption with this version is that you will be allowing connections from the outside world to come into your LAN (to access web servers, mail servers, etc.) but you want to restrict certain countries from access.