<story><title>MikroTik routers are forwarding owners’ traffic to unknown attackers</title><url>https://blog.netlab.360.com/7500-mikrotik-routers-are-forwarding-owners-traffic-to-the-attackers-how-is-yours-en/</url></story><parent_chain></parent_chain><comment><author>r1ch</author><text>It&amp;#x27;s worth pointing out that the default configuration of almost every Mikrotik router these days comes with a firewall that blocks inbound access to all ports. Admins have to go out of their way to expose winbox to the internet (as many did - including myself - under the belief the protocol was somewhat secure running over TLS).&lt;p&gt;Unfortunately NIH syndrome runs at an all time high at Mikrotik. Even the RouterOS webserver and SMB implementations were custom written, and both were later found to contain remotely exploitable bugs. I&amp;#x27;m sure there are other holes lurking in their implementations of ipsec, openvpn, etc, so I no longer open up anything and rely on port forwarding to more secure and battle-tested services like OpenSSH &amp;#x2F; Wireguard for remote management.</text></comment>
<story><title>MikroTik routers are forwarding owners’ traffic to unknown attackers</title><url>https://blog.netlab.360.com/7500-mikrotik-routers-are-forwarding-owners-traffic-to-the-attackers-how-is-yours-en/</url></story><parent_chain></parent_chain><comment><author>kibwen</author><text>Can anyone suggest a wireless router that someone can buy today that either ships with or can be flashed with OSS firmware? I&amp;#x27;ve been trying to shop around for one compatible with DD-WRT or OpenWRT and been rather disheartened so far; every promising model I&amp;#x27;ve found either requires you to play roulette with the specific hardware version of the router that you receive (which is never advertised on product pages), or is out of stock entirely, or costs upwards of $250 (which is tough to sell to my friends, when their ISP charges $10&amp;#x2F;mo to rent a router with much less hassle).</text></comment>