sure ka sa kalokohan nung tech? if i were you, eh mangangalap ako ng katibayan (router logs, specifically unexpected config changes) at ire-report ko sa RSP. di makatarungan ang gawaing ito.
btw, which mikrotik are you using? the soho/consumer grade models should have a default firewall rule dropping all traffic not originating from the LAN. of course, maaari ding tinanggal ni kups tech support itong rule na ito.
anyway, there are different ways to do this. firewall filtering, limiting management access to a specific subnet (your LAN), disabling vpn access (if not required) etc.
i can have a look later (when i get home), unless someone else chimes in before then.
surely, me access ka sa (mikrotik) as admin?
to confirm your suspicion, check mo 'yung log kung me nag-aaccess nga ng router mo.
> /log print where message~"logged"
'yung easy muna:
- change the admin password
- check mo rin kung me dinagdag s'yang user/s and delete those