Router Configuration
Firewall Rules
8 min read
•Updated January 2026
Configure firewall rules to secure your router while allowing Kitonga API access.
Allow Kitonga API Access
/ip firewall filter add chain=input protocol=tcp dst-port=8728 src-address=0.0.0.0/0 action=accept comment="Kitonga API" add chain=input protocol=tcp dst-port=8729 src-address=0.0.0.0/0 action=accept comment="Kitonga API-SSL"
Block Unauthorized Access
/ip firewall filter add chain=input protocol=tcp dst-port=8291 src-address=!192.168.0.0/16 action=drop comment="Block external WinBox"
Hotspot Bypass Rules
/ip firewall nat add chain=pre-hotspot dst-address=api.kitonga.klikcell.com action=accept add chain=pre-hotspot dst-address=kitonga.klikcell.com action=accept
Important
Always test your firewall rules after applying. Incorrect rules can lock you out.