Is it possible to add a dynamic entry to an address list with an SNMP command? Basically I want run a script on my servers and if they see an IP make X many failed SSH attempts to add that IP to the firewall black list for one week on our border Mikrotik.
I don’t know about SNMP commands to add it in.
But if you are using something like Fail2Ban I believe you can call a script / command as part of the processing when the rule is matched and then you can use API calls.
Regards
Alexander
SNMP has very limited write (almost non-existent) so, no, you cannot do that via SNMP. If you can call some command or tool from SNMP monitoring tool you are using you can create API tool that will do that for you.
simply create a user with SSH certificate and execute commands remotely via SSH
http://wiki.mikrotik.com/wiki/Use_SSH_to_execute_commands_(DSA_key_login)
Where can I find more info on API calls?