Brute Force Attacks

Is there a way with the Mikrotik firewall to block brute force attacks on SSH and FTP? The number of these attacks anymore is ridiculas. SSH usually only allows 6 attempts before disconnecting. So if you see over X many sync packets coming in on TCP 21-23 from a single given IP in a minute block them. Not? How would you do that?

They abillity to block scans would be nice too. I see scans of my entire IP pools for an open port all the time. They seem to look for an open port 22 or other accross the entire IP block.

Matthew

Search the forum. This has been discussed at length many times.

Main recommendation is: block access to the router from the Internet. If you need to manage it then use a VPN tunnel.

Regards

Andrew