Mikrotik and syn flood attacks‎

RouterOS General
1

Hi !

It is possible to detect flood attacks and to end them?

Thanks…

2

this should help:

 
0   protocol=tcp tcp-options=syn-only limit-count=50 limit-burst=10 limit-time=1s action=accept
1   protocol=tcp tcp-options=syn-only action=drop

place these rules in input or forward chain and play with limit-count to find suitable value for your network