Hello , i am having difficuties about ccr1036-12g-4s when get udp attack with 0 length . Using RouterOS 6.4 and here is the tcp dump of attack : 21:10:26.299021 IP 132.155.220.60.39812 > x.x.x.x.44710: UDP, length 0 21:10:26.299034 IP 180.19.33.203.lxi-evntsvc > x.x.x.x.2342: UDP, length 0 21:10:26....

it doesnt handle 250mbit udp flood, there is no other rule except drop udp

tcpSYNcokies "enable" 100mbit (syn flood , spoof ips) down mikrotik (cpu %100)

Hello , i am searching to protect from syn floods from spoof addresses since i bought routerboard CCR1036-12G-4S without any luck. When syn attack comes to mikrotik after 50mbit (prox 5000pps/sec) cpu goes crazy and makes device unaccesible. I found some articles witch is block whole new reqests whe...

it drops all new syn packets with that rules whitch written on page.i need drop new syn paket if it comes from spoof ip address

Hello guys , i need to enable on syncookie protection for detect and block spoof ips. I already enabled TCP-Syn cookies in ip settings and it wont help to prevent ddos attack. Routerboard inaccessible when synflood attack comes from spoof ips. If i limit whole new synconnections routerboard drops al...

Hello guys , i need to enable on syncookie protection for detect and block spoof ips. I already enabled TCP-Syn cookies in ip settings and it wont help to prevent ddos attack. Routerboard inaccessible when synflood attack comes from spoof ips. If i limit whole new synconnections routerboard drops al...