Script to add IP's to firewall blocklist (DROP)

[balimore]

@johnsk

Hi all,

does anyone have a script to block (DROP) a certain IP after 3 (or any number) of invalid SSH/FTP attempts? I added some IP’s manually to the firewall (IP → FIREWALL → Filter rules → … → Action DROP) but sometimes I don’t have time to check out the log manually.

I am asking because lately my RB532’s are under attack from quite a few IP’s trying out combinations of user names/passwords and I don’t have time to block every IP manually.

Can someone help?

Thank you in advance

john

---

Hello All,

Just manage to submenu [/ip service] this’s simple solution for protect your Router.

Peace all
Balimore DOT com

---