Optimizing Mikrotik-Based Network Security using Address List, Firewall Filter Rules, and Raw Firewall

Febrian Wahyu Christanto; Putri Cholillah; Alauddin Maulana Hirzan

doi:10.22456/2175-2745.142954

Authors

Febrian Wahyu Christanto Universitas Semarang (USM) https://orcid.org/0000-0003-4190-3831
Putri Cholillah Universitas Semarang (USM)
Alauddin Maulana Hirzan Universitas Semarang (USM) https://orcid.org/0000-0002-2486-6787

DOI:

https://doi.org/10.22456/2175-2745.142954

Keywords:

brute force, denial of service, firewall filter rules, mikrotik, network security

Abstract

The rise of hacking access rights in computer networks has made it easy for cybercriminals to steal personal data. Based on Surfshark data during January 2020 - January 2024 explain that Indonesia became the country with the 8th most breached accounts in the world with an estimated 94.22 million breached digital accounts. Until now cyber sequrity in Indonesia is still weak in average. To minimize the occurrence of router hacking and cyber sequirty this research will implement network security optimization using the address list method, firewall filter rules, and firewall raw on Mikrotik Routers with conduct several tests. Security tests using Denial of Service (DoS) and Brute Force attack techniques carried out results evident that the use of firewall filter rules is effective to preventing Brute Force attacks that try to get the router device password with the CPU Load value dropping from 95% to 5%. However it is less effective to prevent DoS attacks with 800,000 attack packets because the CPU Load value only drops from 95% to 72%. This is still far from normal conditions. Security optimization using the raw firewall method proved more effective in preventing DoS attacks with the CPU Load value successfully dropping to 43%. So to secure the network from DoS attacks it is not enough just to use the built-in features of the Mikrotik router but also requires the support of other additional devices to increase its effectiveness in reducing the CPU load to a normal number below 10%.

Downloads

Download data is not yet available.

Author Biographies

Putri Cholillah, Universitas Semarang (USM)

Department of Information Technology

Alauddin Maulana Hirzan, Universitas Semarang (USM)

Department of Information Technology

References

[1] ZHANG, T.; Zhixuan Lv. Development and Integration Between Computer Network Technology and New Media. In: Proceedings of the 2022 2nd International Conference on Computer Technology and Media Convergence Design (CTMCD 2022). Atlantis Press, 2022. p. 135–141. ISBN 2352-538X. Disponível em: ⟨https://doi.org/10.2991/978-94-6463-046-6_17⟩.

[2] SIRAIT, H. History of Computer Networks. Journal of Tecnologia Quantica, v. 1, n. 3, p. 117–134, nov. 2024. Section: Articles. Disponível em: ⟨https://journal.ypidathu.or.id/index.php/quantica/article/view/1447⟩.

[3] KILINCER, I. F.; ERTAM, F.; SENGUR, A. Machine learning methods for cyber security intrusion detection: Datasets and comparative study. Computer Networks, v. 188, p. 107840, 2021. ISSN 1389-1286. Disponível em: ⟨https://www.sciencedirect.com/science/article/pii/S1389128621000141⟩.

[4] SASI, T. et al. A comprehensive survey on IoT attacks: Taxonomy, detection mechanisms and challenges. Journal of Information and Intelligence, v. 2, n. 6, p. 455–513, nov. 2024. ISSN 2949-7159. Disponível em: ⟨https://www.sciencedirect.com/science/article/pii/S2949715923000793⟩.

[5] ABUFARDEH, S.; FALAH, B. The State of Phishing Attacks and Countermeasures. International Journal of Computer Science and Security (IJCSS), v. 17, n. 4, p. 54–71, 2023. ISSN 1985-1553. Disponível em: ⟨https://www.cscjournals.org/library/manuscriptinfo.php?mc=IJCSS-1702⟩.

[6] GUNDUZ, M. Z.; DAS, R. Cyber-security on smart grid: Threats and potential solutions. Computer Networks, v. 169, p. 107094, mar. 2020. ISSN 1389-1286. Disponível em: ⟨https://www.sciencedirect.com/science/article/pii/S1389128619311235⟩.

[7] YANG, W. Research on the Relationship between Computer Network and Economic Development in Information Environment. Journal of Physics: Conference Series, v. 1744, n. 4, p. 042011, fev. 2021. ISSN 1742-6596. Publisher: IOP Publishing. Disponível em: ⟨https://dx.doi.org/10.1088/1742-6596/1744/4/042011⟩.

[8] NURHAYATI, H. Statistic, Internet Usage in Indonesia - Statistics & Facts. 2024. Disponível em: ⟨https://www.statista.com/topics/2431/internet-usage-in-indonesia/#topicOverview⟩.

[9] Adi Ahdiat. Infographic, Indonesia Masuk 10 Negara dengan Kebocoran Data Terbesar. 2024. Disponível em: ⟨https://databoks.katadata.co.id/infografik/2024/07/02/indonesia-masuk-10-negara-dengan-kebocoran-data-terbesar⟩.

[10] TRILOKA, J.; HARTONO, H.; SUTEDI, S. Detection of SQL Injection Attack Using Machine Learning Based On Natural Language Processing. International Journal of Artificial Intelligence Research; Vol 6, No 2 (2022): Desember 2022, 2022. Disponível em: ⟨https://ijair.id/index.php/ijair/article/view/355⟩.

[11] Ficky Ramadhan. News, Penyebab Kebocoran Data Pribadi di Indonesia Akibat Tata Kelola yang Buruk. 2024. Disponível em: ⟨https://mediaindonesia.com/teknologi/719594/penyebab-kebocoran-data-pribadi-di-indonesia-akibat-tata-kelola-yang-buruk⟩.

[12] BISWAS, A. K. et al. Attacks Toward Wireless Network-on-Chip and Countermeasures. IEEE Transactions on Emerging Topics in Computing, v. 9, n. 2, p. 692–706, jun. 2021. ISSN 2168-6750.

[13] MUKERI, A. F.; GAIKWAD, D. P. Adversarial machine learning attacks and defenses in network intrusion detection systems. International Journal of Wireless and Microwave Technologies (IJWMT), v. 12, n. 1, p. 12–21, 2022. ISSN 2076-9539.

[14] ASLAN, O. et al. A Comprehensive Review of Cyber Security Vulnerabilities, Threats, Attacks, and Solutions. Electronics, v. 12, n. 6, 2023. ISSN 2079-9292. Disponível em: ⟨https://www.mdpi.com/2079-9292/12/6/1333⟩.

[15] M. A. Elsadig. Detection of Denial-of-Service Attack in Wireless Sensor Networks: A Lightweight Machine Learning Approach. IEEE Access, v. 11, p. 83537–83552, 2023. ISSN 2169-3536.

[16] JOO, S. et al. Machine Learning-Based Detection and Selective Mitigation of Denial-of-Service Attacks in Wireless Sensor Networks. Computers, Materials & Continua, v. 82, n. 2, 2025. ISSN 1546-2226.

[17] XU, K. et al. Research on Multi-Layer Defense against DDoS Attacks in Intelligent Distribution Networks. Electronics, v. 13, n. 18, 2024. ISSN 2079-9292.

[18] ALHAMED, M.; RAHMAN, M. M. H. A Systematic Literature Review on Penetration Testing in Networks: Future Research Directions. Applied Sciences, v. 13, n. 12, 2023. ISSN 2076-3417.

[19] HAMZA, A. A.; AL-JANABI, R. Jumma surayh. Detecting Brute Force Attacks Using Machine Learning. BIO Web Conf., v. 97, 2024. Disponível em: ⟨https://doi.org/10.1051/bioconf/20249700045⟩.

[20] GAUTAM, T.; SINGH, U. An approach for detecting password pattern in dictionary attack. Mililink Journal of Advanced Materials Science, v. 215, p. 2765–2780, 2022.

[21] WIDIANTO, S. R. et al. Python gmail dictionary attack using wordlist. AIP Conference Proceedings, v. 2714, n. 1, p. 030033, maio 2023. ISSN 0094-243X. Disponível em: ⟨https://doi.org/10.1063/5.0128464⟩.

[22] PARK, J. et al. Network log-based SSH brute-force attack detection model. Computers, Materials & Continua, v. 68, n. 1, 2021.

[23] PAMUNGKAS, C. et al. Analysis of brute force attacks using National Institute of Standards and Technology (NIST) methods on routers. Journal of Informatics Information System Software Engineering and Applications (INISTA), v. 5, n. 2, p. 115–125, maio 2023.

[24] A. Daniel; I. A. Suleiman. Design and Implementation of MikroTik Router-Operating System Introduction. Direct Research Journal of Engineering and Information Technology, v. 11, n. 8, p. 138–144, 2022. ISSN 2354-4155.

[25] SUKARSA, I. M.; PIARSA, I. N.; PUTRA, I. G. B. P. Simple solution for low cost bandwidth management. Telkomnika (Telecommunication Computing Electronics and Control), v. 19, n. 4, p. 1419–1427, 2021. ISSN 2302-9293.

[26] BASAR, A. R. et al. Computer Network Design Using the Simple Queue Method in Maximising Network Performance in Companies. Journal of Computer-based Instructional Media, 2023. Disponível em: ⟨https://api.semanticscholar.org/CorpusID:266245608⟩.

[27] WIHARTI, W. et al. Load Balancing and Fail Over MikroTik Implementation Using Per Connection Classifier (PCC) on Two Internet Providers Interconnection. International Journal of Advanced Science Computing and Engineering, v. 5, n. 2, p. 129–135, ago. 2023. Section: Articles. Disponível em: ⟨https://www.ijasce.org/index.php/IJASCE/article/view/135⟩.

[28] SARI, A. et al. Bandwidth Management Design Using the Simple Queue Method in Mikrotik RouterOS and The Winbox Application. INTERACTION: Jurnal Pendidikan Bahasa, v. 10, n. 1, p. 396–402, jul. 2023. Disponível em: ⟨https://unimuda.e-journal.id/jurnalinteraction/article/view/4441⟩.

[29] PURNOMO, V. I.; ANINDITO, B.; JUNAEDI, L. Design of Load Balancing Using Static Route Address List Method In The Case Study of Tambakrejo Village Tulungagung. IJEEIT: International Journal of Electrical Engineering and Information Technology, v. 5, n. 1, p. 22–27, 2022. ISSN 2615-2096.

[30] MASLAN, A.; MOHAMAD, K. M.; FOOZY, C. F. M. Enhancement detection distributed denial of service attacks using hybrid n-gram techniques. KOMNIKA (Telecommunication Computing Electronics and Control), v. 20, n. 1, p. 61–69, 2022. ISSN 2302-9293.

[31] NAJAR, A. A.; NAIK, S. M. Cyber-Secure SDN: A CNN-Based Approach for Efficient Detection and Mitigation of DDoS attacks. Computers & Security, v. 139, p. 103716, abr. 2024. ISSN 0167-4048. Disponível em: ⟨https://www.sciencedirect.com/science/article/pii/S0167404824000178⟩.

[32] MAZHAR, N. et al. SDN based Intrusion Detection and Prevention Systems using Manufacturer Usage Description: A Survey. International Journal of Advanced Computer Science and Applications, v. 11, dez. 2020.

[33] Iwan Giri Waluyo; KURNIAWAN, D. Mikrotik Login Security with Port-Knocking and Brute Force Firewall at PT. Time Excelindo. International Journal of Integrative Sciences, v. 2, n. 7, p. 971–978, jul. 2023. Section: Articles. Disponível em: ⟨https://journal.formosapublisher.org/index.php/ijis/article/view/4782⟩.

[34] SWATHI, K. Brute Force Attack on Real World Passwords. Int. J. Res. Public Rev, v. 3, p. 552–558, 2022.

[35] SARI, L. O. et al. Implementation of Bandwidth Management and Access Restrictions Using PCQ and Firewall Methods in SMP Tunas Bangsa Network. International Journal of Electrical, Energy and Power System Engineering, v. 5, n. 3, p. 73–79, nov. 2022. Section: Articles. Disponível em: ⟨https://ijeepse.id/journal/index.php/ijeepse/article/view/117⟩.

[36] Md. Zihadul Islam et al. Communication and bandwidth optimization technique using MikroTik. International Journal of Advanced Research in Computer and Communication Engineering, v. 13, n. 5, 2024.

[37] Lutfi, Salkin et al. Optimal Filter Assignment Policy Against Distributed Denial of Service Attack on Router Mikrotik. MATEC Web Conf., v. 372, p. 04008, 2022. Disponível em: ⟨https://doi.org/10.1051/matecconf/202237204008⟩.

[38] TIWARI, A.; PAPINI, S.; HEMAMALINI, V. An enhanced optimization of parallel firewalls filtering rules for scalable high-speed networks. Materials Today: Proceedings, v. 62, p. 4800–4805, 2022. ISSN 2214-7853. Disponível em: ⟨https://www.sciencedirect.com/science/article/pii/S2214785322016881⟩.

[39] YIN, X.-X. et al. A Review on the Rule-Based Filtering Structure with Applications on Computational Biomedical Images. Journal of Healthcare Engineering, v. 2022, n. 1, p. 2599256, jan. 2022. ISSN 2040-2295. Publisher: John Wiley & Sons, Ltd. Disponível em: ⟨https://doi.org/10.1155/2022/2599256⟩.

[40] Yunif Lukman Hakim; Hendro Wijayanto. Combination of Filtering and Switching Methods for Network Security from Pornographic Content. International Journal of Computer and Information System (IJCIS), v. 5, n. 3, p. 132-191, 2024. ISSN 2745-9659.

[41] WIRDA FITRIANI; FACHRID WADLY; ZUHRI RAMADHAN. NETWORK SECURITY IMPLEMENTATION FROM DDOS ATTACKS WITH MIKROTIK ROUTERS. International Journal Of Computer Sciences and Mathematics Engineering, v. 3, n. 2, p. 18-29, out. 2024. Section: Articles. Disponível em: ⟨https://ijecom.org/index.php/IJECOM/article/view/93⟩.

[42] MAULANA, A.; SUHARTO, N.; HARIYADI, A. Application of MikroTik Firewall for Website Access Restriction and Prevention of DoS (Denial of Service) Attacks on Internet Networks Al-Mahrusiyah Vocational School Lirboyo. Journal of Telecommunication Network (Jurnal Jaringan Telekomunikasi), v. 13, n. 1, p. 81-86, mar. 2023. Disponível em: ⟨https://jartel.polinema.ac.id/index.php/jartel/article/view/547⟩.

[43] MASUM, A.; SACHCHA, M. R. Security Analysis of Government & Financial Websites of Bangladesh. [S.l.]: International Journal of Education and Management Engineering, 2022. v. 12.

[44] GOLDARA, R.; PATACSIL, J. An Optimized Wireless Network Architecture for Department of Agriculture, Region 1. Data Science: Journal of Computing and Applied Informatics, v. 6, n. 1, p. 12-34, jan. 2021. Disponível em: ⟨https://talenta.usu.ac.id/JoCAI/article/view/7873⟩.

[45] PRRIYADARSHINI, M. A.; DEVI, S. R. Detection of DDoS Attacks Using Supervised Learning Technique. Journal of Physics: Conference Series, v. 1716, n. 1, p. 012057, dez. 2020. ISSN 1742-6596. Publisher: IOP Publishing. Disponível em: ⟨https://dx.doi.org/10.1088/1742-6596/1716/1/012057⟩.

[46] ARMOOGUM, S.; MOHAMUDALLY, N. A. A Comprehensive Review of Intrusion Detection and Prevention Systems against Single Flood Attacks in SIP-Based Systems. International Journal of Computer Network and Information Security, 2021. Disponível em: ⟨https://api.semanticscholar.org/CorpusID:245469155⟩.

[47] Alexander Gutnikov; Oleg Kupreev; Ekaterina Badovskaya. Report, DDoS attacks in Q1 2021. 2021. Disponível em: ⟨https://securelist.com/ddos-attacks-in-q1-2021/102166/⟩.