Traffic ddos

RouterOS General
1

Hello all!

Today i have a traffic ddos, like one IP ddosing me with a traffic for example 173.1.33.44 i see in “Torch” this IP ddosed my for 490 Mb/s

My internet speed is 500 mb/s, and ofcourse i dont have internet..

So i need to know how to block this automatically (or limit traffic), because ddoser can change IP easy and ddos me again.

If someone have any advices please tell me! Thanks!

2

/ip firewall filter
add chain=input comment=“default configuration” protocol=icmp
add chain=input comment=“default configuration” connection-state=established
add chain=input comment=“default configuration” connection-state=related
add chain=input comment=“WinBOX accept” dst-port=8291 protocol=tcp
add action=drop chain=input comment=“default configuration”
add chain=forward comment=“default configuration” connection-state=established
add chain=forward comment=“default configuration” connection-state=related
add action=drop chain=forward comment=“default configuration” connection-state=invalid
add action=drop chain=input comment=“block udp dns” dst-port=53 protocol=udp
add action=drop chain=input comment=“block tcp dns” dst-port=53 protocol=tcp

Try this script, if helps don’t forget karma :slight_smile: