01 · hero

Sensible defaults for your MikroTik firewall.

Battle-tested RouterOS firewall rules and community-curated address lists. Paste, schedule, done. No agent, no telemetry, no account required.

door A

I want firewall rules.

A walkthrough that hardens a fresh router in about 10 minutes. Input chain, forward chain, IPv6, Winbox/SSH access.

Quickstart → Browse topics

door B

I want blocklists.

Subscribe to community-curated address lists. RouterOS pulls them with /tool fetch. Updates daily; signed.

Browse lists → Docs
  • SCANNER scanners Recon traffic from public scanners — masscan, zmap, shodan.
  • BOTNET botnet-c2 Known C2 endpoints from public threat-intel feeds.
  • BRUTE ssh-bruteforce Repeat SSH offenders observed in the last 7 days.
  • TOR tor-exits Public Tor exit nodes — informational, log don’t drop.

Live entry counts and update cadence appear here once the list engine ships.

02 · trust strip

  • Independent

    solo dev · no investors

  • Verifiable lists

    sha256 manifest

  • No telemetry

    fetch from your router

  • Community-funded

    monthly transparency

03 · how it works

How it works.

  1. STEP 01

    Pick a list

    Browse curated lists or paste our firewall script.

  2. STEP 02

    Paste the URL into RouterOS

    /tool fetch url=… on a daily schedule.

  3. STEP 03

    Drop reaches your router

    Lists update; your firewall stays current.