Dear Mikrotik Gurus;
I have been scouring the wikis and the forum for days. I have looked at http://forum.mikrotik.com/t/ddos-story-or-warning-use-conection-limit-with-caution/49743/1
but still no luck.
All I want to do is drop certain port or ports connections that make more then 10 connection attempts from the same ip or different based on needs within a 1 minute time or certain limit need.
I don’t want to drop connection counts just connection tries per Minute per se.
Eg. Someone tries to connect to port 22 over 10 times in a minute. NOT 10 simultaneous connections but 10 connection attempts in a 1 minute interval. (IE they are trying to retry connecting as they could not connect before)
Inn firewall Filters Rules EXTRA TAB I have:
Limit Connection = concurrent connections
Limit = packets per sec min hour etc but not connection attempts???
Dst. Limit = confusing… in the wikis if the time means attempts at connecting per sec min or hour???
Dst. Limit seems right but how do I get for example 10 connection attempts per min drop rule from this??
Any help would be much appreciated
Travis