hello
I have been getting this error failed login in my log file.
how can i block the whole chain of ip addresses
92.63.194.0- 255 and 216.218.206.0-255
or is there a better solution for this ?
When that is all you have, do nothing. Except maybe stop using PPTP.
Portscanning and trying is normal on the internet.
When you have so many of those that it becomes a nuisance, you can add a firewall rule to block them.
Make an address list where you put those addresses or subnets (92.63.194.0/24) and add an input rule to drop traffic with source address from that list.
Also make sure you have input rules that only allow traffic to the ports you really want to be accessible from internet.
I.e. do NOT allow input to ports like 21,22,23,80,443,8192 from internet. (ports used for management of your router)
Only allow them from your LAN or when really required from a VPN.
i need the vpn so i have to let it be for now
Thanks for the advice
http://forum.mikrotik.com/t/blocked-external-ip/136623/15
You can use my firewall example to solve your problem. If you really need PPTP, put extra rules behind L2TP. I would advise you to use L2tp.
You can block addresses using IP-Firewall-Raw chain.
/ip firewall raw
add action=drop chain=prerouting in-interface=ether1 src-address-list=Block-List
/ip firewall address-list
add address=216.218.206.0/24 list=Block-List
add address=92.63.194.0/24 list=Block-List
Thank you