hey guys i have question regarding this dude application, im have my dmitry firewalling such as block port scanner everytime i open my dude and scan network my computer ip block. is there anyway to prebent this kind of config?
thanks
Simple solution: except your admin IP that is to be allowed to scan from being firewalled further down the chain by adding an accept rule for it at the very top.
hi fewi check pls, where do i put the accept rules my ip or i add in src address(admin ip) and tick the exception? please help
17 ;;; Port scanners to list
chain=input action=add-src-to-address-list protocol=tcp psd=21,3s,3,1 address-list=port scanners
address-list-timeout=2w
18 ;;; NMAP FIN Stealth scan
chain=input action=add-src-to-address-list tcp-flags=fin,!syn,!rst,!psh,!ack,!urg protocol=tcp
address-list=port scanners address-list-timeout=2w
19 ;;; SYN/FIN scan
chain=input action=add-src-to-address-list tcp-flags=fin,syn protocol=tcp address-list=port scanners
address-list-timeout=2w
20 ;;; SYN/RST scan
chain=input action=add-src-to-address-list tcp-flags=syn,rst protocol=tcp address-list=port scanners
address-list-timeout=2w
21 ;;; FIN/PSH/URG scan
chain=input action=add-src-to-address-list tcp-flags=fin,psh,urg,!syn,!rst,!ack protocol=tcp
address-list=port scanners address-list-timeout=2w
22 ;;; ALL/ALL scan
chain=input action=add-src-to-address-list tcp-flags=fin,syn,rst,psh,ack,urg protocol=tcp
address-list=port scanners address-list-timeout=2w
23 ;;; NMAP NULL scan
chain=input action=add-src-to-address-list tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg protocol=tcp
address-list=port scanners address-list-timeout=2w
24 ;;; dropping port scanners
chain=input action=drop src-address-list=port scanners
thanks
Accept the admin IP before all those rules, like I said.
/ip firewall filter add chain=input src-address=ADMIN_IP action=accept place-before=17
wow thats great fewiiiii!!!