Helo ,
I have mikrotik ros 2.9.27, and 400 windows-xp clients.
A lot of clients are virused and make flood to dns provider servers (udp port 53).
How can i make a filter for this virused clients?
10x in advanced
Re: my clients is virused, help me plees
either block the entire DNS port, or add a rule to add SRC-ADDRESS to any IP that has too many DNS requests.
Dennis Burgess, MCTCE, MTCNA, MCTCTE, MTCWE, MTCNIE, A+, N+, MCP, MTCSE Mikrotik Certified Consultant / Trainer
Need Mikrotik Support: http://www.linktechs.net -- Link Technologies, Inc.
-- Author of "Learn RouterOS: Second Edition"
Need Mikrotik Support: http://www.linktechs.net -- Link Technologies, Inc.
-- Author of "Learn RouterOS: Second Edition"
Re: my clients is virused, help me plees
u can be more specific, pleez?either block the entire DNS port, or add a rule to add SRC-ADDRESS to any IP that has too many DNS requests.
Re: my clients is virused, help me plees
400 PC virused?? U got a nasty neigborhood 
:(:(
My solution would be to desinfect the clients!!
:(:(My solution would be to desinfect the clients!!
--Do you remember that guy who gave up? Neither does anybody else!
Re: my clients is virused, help me plees
m.b. New Firewall Rule -> Extra -> Limit
Russian-speaking forum: https://forum.mikrotik.by/. Welcome!
For every complex problem, there is a solution that is simple, neat, and wrong.
MikroTik. Your life. Your routing.
For every complex problem, there is a solution that is simple, neat, and wrong.
MikroTik. Your life. Your routing.
Re: my clients is virused, help me plees
unplug their cable, and if they call to complain - suggest to remove the virus and then internet will be back. i've seen this and it actually works
No answer to your question? How to write posts
Re: my clients is virused, help me plees
--Do you remember that guy who gave up? Neither does anybody else!
Re: my clients is virused, help me plees
Esti din RO ? Daca da, lasa un ym, si te pot ajuta.
You can block the ip of each client suspected of a virus, and they will call you. Just use torch to find out what's happening, and then add a firewall rule with "drop" on a "virused" src-address list. Wich you make by adding the infected ip's to it.
You can block the ip of each client suspected of a virus, and they will call you. Just use torch to find out what's happening, and then add a firewall rule with "drop" on a "virused" src-address list. Wich you make by adding the infected ip's to it.
Re: my clients is virused, help me plees
Esti din RO ? Daca da, lasa un ym, si te pot ajuta.
You can block the ip of each client suspected of a virus, and they will call you. Just use torch to find out what's happening, and then add a firewall rule with "drop" on a "virused" src-address list. Wich you make by adding the infected ip's to it.
Salut, sunt din ro
Am rezolvat ceva ceva dar nu e foarte bine.
ym: cccblue_suport@yahoo.com
Poate ne sincronizam pe messenger intr-o seara
Multumesc,
Re: my clients is virused, help me plees
k.
You're on my list.
You're on my list.