Community discussions

Search found 9 matches

by daived
Mon Jan 27, 2014 1:42 am
Forum: General
Topic: Traffic ddos
Replies: 1
Views: 439

Traffic ddos

Hello all! Today i have a traffic ddos, like one IP ddosing me with a traffic for example 173.1.33.44 i see in "Torch" this IP ddosed my for 490 Mb/s My internet speed is 500 mb/s, and ofcourse i dont have internet.. So i need to know how to block this automatically (or limit traffic), because ddose...
by daived
Wed Jan 15, 2014 12:04 am
Forum: General
Topic: Block UDP traffic
Replies: 7
Views: 6050

Re: Block UDP traffic

Forgot the Chain, depends on how you're using your MT Device. chain=forward does what you need. Depends on what kind of DDoS you're receiving, your Question sounds like UDP Port 53 ;) chain=forward dst-port=53 protocol=udp action=drop in-interface=etherx Should to the Job, if you have the /ip servi...
by daived
Tue Jan 14, 2014 9:27 pm
Forum: General
Topic: Block UDP traffic
Replies: 7
Views: 6050

Re: Block UDP traffic

Maybe someone have some rules for Anti UDP traffic DDOS?
by daived
Tue Jan 14, 2014 7:01 pm
Forum: General
Topic: Block UDP traffic
Replies: 7
Views: 6050

Re: Block UDP traffic

/ip firewall filter add src-address=!192.168.1.0/24  protocol=udp action=drop
I not need to set chain?
by daived
Tue Jan 14, 2014 4:17 am
Forum: General
Topic: how to protect against UDP flood
Replies: 11
Views: 12577

Re: how to protect against UDP flood

Hi, did you solved this?
by daived
Tue Jan 14, 2014 3:02 am
Forum: General
Topic: Block UDP traffic
Replies: 7
Views: 6050

Block UDP traffic

Hi guys, can somebody tell me how to block UDP trafic for all, but allow it only for local 192.168.1.0/24 ?
by daived
Mon Jan 13, 2014 12:46 am
Forum: General
Topic: DDoS story, or WARNING: use 'conection-limit' with caution!
Replies: 112
Views: 63130

Re: DDoS story, or WARNING: use 'conection-limit' with cauti

Hi, sorry for this post, the topic is very old, but: add chain=block-ddos action=add-dst-to-address-list address-list=ddosed address-list-timeout=10m disabled=yes What router will write in this list? My local ip what is ddosed now? If i currently have only one active IP, i need this rule? So for me ...
by daived
Mon Apr 08, 2013 5:38 pm
Forum: Scripting
Topic: Mikrotik drop port scanners, dont work!!!
Replies: 0
Views: 2233

Mikrotik drop port scanners, dont work!!!

Hello! I have a problem with Mikrotiki drop port scanning. I have 80, and 21, 53 open ports. And i used mikrotik wiki manual there: http://wiki.mikrotik.com/wiki/Drop_port_scanners I have this rules: add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanner...
by daived
Fri Apr 05, 2013 2:58 pm
Forum: Scripting
Topic: Need help with a RX Packet DDoS
Replies: 0
Views: 480

Need help with a RX Packet DDoS

Hello. I have some problems with internet connection, some kid ddossing me with RX Packets - 100 M/bs (6000-8000 Rx packets) DDoS (see screenshot bellow) http://www.bildites.lv/images/kxqkgbtqd8g4mcnckhy7.png So maybe any idea, about security with mikrotik RouterOS? I have CPU: Quad Core (8GB of ram...