01 · hero

Sensible defaults for your MikroTik firewall.

Battle-tested RouterOS firewall rules and community-curated address lists. Paste, schedule, done. No agent, no telemetry, no account required.

door A

I want firewall rules.

A walkthrough that hardens a fresh router in about 10 minutes. Input chain, forward chain, IPv6, Winbox/SSH access.

Quickstart →Browse topics

door B

I want blocklists.

Subscribe to community-curated address lists. RouterOS pulls them with/tool fetch. Updates daily; signed.

Browse lists →Docs
  • SCANNERscannersRecon traffic from public scanners — masscan, zmap, shodan.
  • BOTNETbotnet-c2Known C2 endpoints from public threat-intel feeds.
  • BRUTEssh-bruteforceRepeat SSH offenders observed in the last 7 days.
  • TORtor-exitsPublic Tor exit nodes — informational, log don’t drop.

Live entry counts and update cadence appear here once the list engine ships.

02 · trust strip

  • Independent

    solo dev · no investors

  • Verifiable lists

    sha512 manifest · off-router

  • No telemetry

    fetch from your router

  • Community-funded

    no ads, no tracking

03 · how it works

How it works.

  1. STEP 01

    Pick a list

    Browse curated lists or paste our firewall script.

  2. STEP 02

    Paste the URL into RouterOS

    /tool fetch url=… on a daily schedule.

  3. STEP 03

    Drop reaches your router

    Lists update; your firewall stays current.