Attention.... Intruder Detected...

Dear All…
I need your help in this matter…
I detect an odd IP in my firewall connection list and it seems that it’s scanning many ports at the same time? but he can’t establish any connection at all.
What is that and how can I prevent such thing to happen in the future :question:

I need some Firewall rules to do so, and dont u think by dropping all ports and make rules for those ones on the service solves the problem..

I need some :bulb: idea

Thanks in advance
Mimoace

Check the wiki for examples of firewall

Maximliano

I was playing with http://demo.mt.lv the other day, It has some excellent examples for firewall rules, well worth a log-in

:slight_smile:

Add port scaners to address-list.
And then drop port scaners.

try with this:

http://wiki.mikrotik.com/wiki/Drop_port_scanners