Mikrotik DNS filter and BLOCK

#block #dns #mikrotik
By default settings mikrotik routers have the DNS Allow Remote Requests enabled and your Mikrotik will be a DNS Server, responding to dns requests. We will filter the requests from outside of the network and disable the DNS server. This will lower the stress on the CPU. Blocking DNS requests that are not explicitly allowed is a good practice. It will keep your router's DNS cache from filling up with unexpected queries and it will preserve your bandwidth for you instead of public entities.
/ip dns set allow-remote-requests=no
/ip firewall filter
add chain=input in-interface=ether1 protocol=udp dst-port=53 action=drop
add chain=input in-interface=ether1 protocol=tcp dst-port=53 action=drop
add chain=input in-interface=ether1 protocol=udp dst-port=23 action=drop
add chain=input in-interface=ether1 protocol=tcp dst-port=23 action=drop