Log4J Exploit firewall filter

RouterOS General
1

Hey everybody,
Just wondering if in the interests of the community to mitigate Log4J2 exploits if anyone has any Firewall filters (Layer7 or otherwise) to stop LDAP & LDAPS protocols outbound that they would be willing to share? or any inbound filtering for the log4J exploit attempts?
I don’t need them personally, but they may be of use to the community in the coming days/weeks & if you have them I encourage you to share them :slight_smile:

All the best

2

Pretty much impossible with static filters, there are nearly infinite possible ways of writing the exploit so you’d need a logic parser to be able to catch them all.