Community discussions

MikroTik App

Search found 8 matches

by TaxiPieter
Sat May 23, 2020 12:19 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

Why not change the port (port translation in router) to your customers. like use 54332 dydns name/url:54332 add chain=dstnat action=dst-nat in-interface-list=WAN dst-port=54332 protocol =tcp? to-addresses=IPserver to-ports=1194 Why would udp scans be stopped by a TCP rule (title of thread- "FL...
by TaxiPieter
Fri May 22, 2020 9:54 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

Problem is the source IP + source port remain the same. Don't think the PSD attributed are going to be very useful here...they operate on the DESTINATION PORT and (same) SOURCE-IP but does not look at the SRC-PORT of the SOURCE-IP. If your OpenVPN needs to be really .... open and globally accessibl...
by TaxiPieter
Fri May 22, 2020 9:44 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

I still want users with a valid certificate to connect, so just closing port 1194 is not really an option. Moving to port 1196 for example is just a matter of time.. That is the issue with running a full public service... Off course I don't know your userbase, but perhaps a script before the connec...
by TaxiPieter
Fri May 22, 2020 9:38 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

Problem is the source IP + source port remain the same. Don't think the PSD attributed are going to be very useful here...they operate on the DESTINATION PORT and (same) SOURCE-IP but does not look at the SRC-PORT of the SOURCE-IP. If your OpenVPN needs to be really .... open and globally accessibl...
by TaxiPieter
Fri May 22, 2020 9:33 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

I still want users with a valid certificate to connect, so just closing port 1194 is not really an option. Moving to port 1196 for example is just a matter of time..
by TaxiPieter
Fri May 22, 2020 9:29 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Re: Flooding UDP port 1194

They are sending it now as a stream so it seems not to be closed. Try this in RAW and see if that stops the attacks: psd (integer,time,integer,integer; Default: ) Attempts to detect TCP and UDP scans. Parameters are in following format WeightThreshold, DelayThreshold, LowPortWeight, HighPortWeight ...
by TaxiPieter
Fri May 22, 2020 8:20 pm
Forum: General
Topic: Flooding UDP port 1194
Replies: 14
Views: 4067

Flooding UDP port 1194

Help! My openVPN server is under attack.. I already was able to stop 90% of the traffic if they origin from a different port with the following rules: /ip firewall filter add action=add-src-to-address-list address-list=blocked-addr address-list-timeout=1d chain=forward connection-limit=2,32 dst-port...
by TaxiPieter
Wed Aug 05, 2009 11:53 pm
Forum: General
Topic: Sample Hotspot Page - Sticky Please
Replies: 369
Views: 358011

Re: Sample Hotspot Page - Sticky Please

hotspot.jpg Hello.. I just started using Mikrotik a few days ago, and this is my login page. It is designed to use on a camping. The website mentioned on the hotspot is not in use yet, because i didn't have time yet to do it. For the internet, I use a UMTS connection. Here's the translation in Engl...