How to block Dangerous Ips

RouterOS Beginner Basics
1

I got a blacklist of dangerous ips & i want to block them all is there any short cut?

http://sokoyo.csit.tw/~blog/2008-03-15/125
http://www.wolfbane.com/articles/dangerous.htm

I have illegal-addr in address list

thanks

2

http://wiki.mikrotik.com/wiki/BOGON_Address_List

3

Hi normis thanks for reply
I have blocked all listed ips in illegal-addr aka BOGONS list here i got one more link
http://www.unixhub.com/block.html
here most of them are domains & i don’t have any idea how to block domains?
without using proxy

please can you help me…

Thanks

4

domains you can block only via Webproxy Access Lists, or if you resolve them, and use the IP address in firewall

5

Thanks alot normis
i have made a try to resolve it

add action=drop chain=forward comment="Drop Bogons Address-list" disabled=no src-address-list=illegal-addr
add action=drop chain=forward comment="Drop Bogons Address-list" disabled=no dst-address-list=illegal-addr

i added a website ip to illegal-addr then i tried to open website it was opening sucessfully, i did any mistake?
:confused:
sorry to disturb u

6

what is in that address-list? maybe this website has multiple IP addresses. try nslookup or some online tool to find out.

7

make a valid static dns entry for the website and block it in firewall.

8

Hey can you provide me firewall rule to block static dns.

thanks for reply