Mikrotik and dynamic address list

RouterOS General
1

Hello!
Is it possible to add a function that would address list with dynamic addresses that are added by a time, was not cleared after restarting the router?

I have a rule that collects addresses that brute force me. The lifetime of address 10 days. This week recruited thousands of addresses, and after a reboot all is lost.

It would be nice, what would these addresses will not disappear.
Or make the button “Make statik”

Thanx

2

share the script that you use, simply adding to the address list, will put it there permanently. but maybe you use some other approach.

3

Here’s the code.


add action=reject chain=forward comment="Drop wp-login.php" dst-address=\
    192.168.30.18 dst-port=80 in-interface=ether1-gateway protocol=tcp \
    reject-with=tcp-reset src-address-list=web_ip
add action=add-src-to-address-list address-list=web_ip address-list-timeout=\
    1w3d3h chain=forward comment="Add wp-login to list" content=\
    wp-login.php dst-address=192.168.30.18 dst-port=80 in-interface=\
    ether1-gateway protocol=tcp

Even the code from Mikrotik wiki about ssh brute force just adds to the address list for 10 days, after the restart, these addresses are disappearing, and want, what would these addresses are not deleted after restarting the router, and deleting after 10 days.

4

Well, the list will get populated again automatically, so I don’t see the need to save it.

5

Hi
I have Same problem and needs for save my last resort of IP addresses
this becomes sometimes a critical security failure.

6

Hi all,

A little late to the party but just wondering if you ever resolved this - dynamic lists saved to memory/storage to survive a reboot?

7

Now, when the date and time is saved I would also appreciate the dynamic ip list saving regularly. And what’s more, saving interface and queue statistics would be very useful. I would like to see that accidental power loss will not make reset of all counters.