Script for remove a specific address list IP

RouterOS Scripting
1

Hello guys, i`m new here.

I have a anti ddos solution in my Router OS 6.34 and when someone make a big ddos my local network IP goes to the addres list = ddoser. I need a script to remove that IP everytime this happens.
If possible, cut out this specfic connection or something for prevent my local IP to fill that list, any ideias?

For clarify, i have some filter rules and when incoming attacks starts i take that IP to a drop list and then marking route, then push to a black hole route.

Best Regards,
Leao

2

6.34 is very old, you should start with upgrade to latest stable release. (read all thread here about various problems, like this: http://forum.mikrotik.com/t/winbox-vulnerability-please-upgrade/122004/1

Why not just add you network to an access list above the block list. Then you would never be blocked. Like a whit list.

3

Abandon the idea that you can filter DDOS out. When ddos-ed, your uplink will be filled and there is nothing you can do about that…

4

Ok guys, first I will update my routeros! Then I will investigate why my filters are failing or filtering lan. I will post more when I get in home tonight

5

Well, i see that my router was filtering 192.168.0.0/24 and i moved it to interface wan
Lets see how it works now.

Edit: i dont know, but when i change the rule from 192.168.0.0/24 to interface= pppoe it drop everything behind the router