Mikrotik hotspot page SYN attack

Hi,
My mikrotik routerboard cpu load is very high. I notice that I have so many connections from my client to the hotpost login page. I’ve written these rules, but they don’t work as I expected. Sometimes they block some addresses but still I have many connection from some clients. Here are the rules:

add action=add-src-to-address-list address-list=Attackers address-list-timeout=\
    5m chain=pre-hs-input connection-limit=100,32 hotspot=!auth protocol=tcp
add action=drop chain=pre-hs-input src-address-list=Attackers

Does anybody have any idea?
Thanks :slight_smile: