Blacklist Filter update script

[Deantwo]

@Jacka

1. Why there are 2 schedules? And if there are 2 it can’t have the same name as in your example.

 /system scheduler
add interval=1d name=UpdateBlackList on-event="/system script run updateBlacklist" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
    start-date=jan/01/1970 start-time=05:00:0
/system scheduler
add interval=00:00:00 name=UpdateBlackList on-event="/system script run blacklistUpdate" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
    start-date=jan/01/1970 start-time=00:00:0

Two schedulers can have the same name, it is weird to have though.

Also not sure the second scheduler is totally correct. At least it can be written better.
See: http://forum.mikrotik.com/t/radius-server-not-working-in-2-8-11/127/1

@Jacka

2. What kind of chain is this “Attacks” ? It should be input or forward chain, am I right ?

/ip firewall filter
add action=drop chain=Attacks comment="Drop connections FROM blacklisted hosts" src-address-list=dynamicBlacklist
add action=drop chain=Attacks comment="Drop connections TO blacklisted hosts" dst-address-list=dynamicBlacklist

The “Attacks” chain is a custom chain, take a look at the jump rules further down.

/ip firewall filter
#...
add action=jump chain=input comment="Check for bad stuff in \"Attack\" chain" jump-target=Attacks
#...
add action=jump chain=forward comment="Check for bad stuff in \"Attack\" chain" jump-target=Attacks

You can read more here: https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

The firewall shown in the first post is just an example, you might want you edit it for your own use or make your own.