How to block DNS resolution from outside in Mikrotik
3 min
overview it is very important to block the dns service on port 53 for incoming connections on your router or firewall doing this increases your network security and helps avoid cyber attacks such as ddos configuration steps to secure your network, connect to your mikrotik using winbox and open a new terminal copy and paste the following commands into the console routeros /ip firewall filter add chain=input in interface=in int protocol=udp dst port=53 action=drop add chain=input in interface=in int protocol=tcp dst port=53 action=drop /ip firewall filter add chain=forward in interface=in int protocol=udp dst port=53 action=drop add chain=forward in interface=in int protocol=tcp dst port=53 action=drop before executing the commands, you must replace in int in the code above with the actual name of your mikrotik wan interface if you use multiple wan interfaces on your mikrotik, you must re run the commands above multiple times, replacing in int with the names of all your other wan interfaces to ensure complete protection