Block a IP on Mikrotik ???

ViREnG · Thu Aug 13, 2009 12:08 pm

hi All
My Problem is :
a People Have a Dictionary BruteForce and Attack to RouterBoard :

By this Actions , Ping of My Customers Change From 1 to 20~50

How to Block this IP or Block All IP's From Other my Network ?

*My Customers Connect to My Network with HotSpot and Login
tnx

kirshteins · Thu Aug 13, 2009 12:18 pm

I use rules like

/ip firewall filter
add action=drop chain=input comment="drop ftp brute forcers" disabled=no dst-port=\
    21 protocol=tcp src-address-list=ftp_blacklist
add action=add-dst-to-address-list address-list=ftp_blacklist address-list-timeout=\
    0s chain=output comment="" content="530 Login incorrect" disabled=no \
    dst-address-list=ftp_stage3 protocol=tcp
add action=add-dst-to-address-list address-list=ftp_stage3 address-list-timeout=1m \
    chain=output comment="" content="530 Login incorrect" disabled=no \
    dst-address-list=ftp_stage2 protocol=tcp
add action=add-dst-to-address-list address-list=ftp_stage2 address-list-timeout=1m \
    chain=output comment="" content="530 Login incorrect" disabled=no \
    dst-address-list=ftp_stage1 protocol=tcp
add action=add-dst-to-address-list address-list=ftp_stage1 address-list-timeout=1m \
    chain=output comment="" content="530 Login incorrect" disabled=no protocol=tcp

To prevent FTP brute forces. Three incorrect FTP logins from single IP address within a minute and IP address is added to a blacklist.

ViREnG · Thu Aug 13, 2009 12:19 pm

where in Win Box

kirshteins · Thu Aug 13, 2009 12:23 pm

Open New Terminal in Winbox and paste it in.

ViREnG · Thu Aug 13, 2009 12:30 pm

Thanks

remuss · Thu Aug 20, 2009 12:47 pm

or u can disable ftp and other services that u don't need, and enable them only wen it's needed

Best regards Remus

prof · Thu Oct 01, 2009 2:50 pm

ohh i do see sometin like that in my side too but not often, well i will look to setting such up very soon

Block a IP on Mikrotik ???

Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Re: Block a IP on Mikrotik ???

Who is online