How to Protect your MikroTik RouterOS? from being used as Spam Relay?
Description
To protect your MikroTik RouterOS? from being used as spam relay you have to:
- Protect your router using firewall rules. See the How To section about it!
- Configure web proxy access list.
The web proxy access list is configured under /ip web-proxy access. For example, add following rules to it to allow access from certain hosts (just 'copy and paste' to the router using Terminal Console or configure the relevant arguments in WinBox): /ip web-proxy access
add src-address=192.168.0.0/24
comment="Our customers"
/ip web-proxy access add dst-port=23-25 action=deny
comment="Deny using us as telnet and SMTP relay"
/ip web-proxy access add action=deny
comment="Deny everything else"
Note, that first you should have rules that allow certain services, and the last rule should always be one that denies access for everything else. Rules are processed in the order they appear on the list. After a rule matches the request, no more rules are processed for it. After adding new rules, move them up using the move command. | 
Access Points
