How to block DNS resolution from outside in Mikrotik

it is very important to block the dns service (port 53), for incoming connections, on your router/firewall , in order to increase security and avoid cyber attacks, such as ddos to do this, connect to your mikrotik, for example, using winbox, and run the following commands from the terminal /ip firewall filter add chain=input in interface=in int protocol=udp dst port=53 action=drop add chain=input in interface=in int protocol=tcp dst port=53 action=drop /ip firewall filter add chain=forward in interface=in int protocol=udp dst port=53 action=drop add chain=forward in interface=in int protocol=tcp dst port=53 action=drop please note replace in int with the name of your mikrotik's wan interface important if you use multiple wan interfaces (multi wan scenario) in your mikrotik, you must re run the above commands, replacing in int with the names of the other wan interfaces other ways to ask how to block dns resolution from outside blocking dns resolution from outside how to