Ben’s Blog

This might not seem like a huge deal to some, but we just passed our first PCI vulnerability scan. These little Mikrotik routers (using RouterOS) really know how to rock!

Out of our current 19 public interfaces, we did have a single one that responded via ICMP. It was more or a less bad timing on our part because performing support on the machines behind the routers isn’t perfected yet, so we have to go in and disable bottom drop-rules for a few minutes to get in. Packet filtering is still active and unwanted traffic won’t come through, but it did allow that router to talk back and announce its existence — unlike the rest of the stoic batch.

One more big step out of the way…