Community discussions

 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 10:33 am

Hi guys,
I have a RB RB2011iL that gives me the following error:
amount the list of addresses drop.malicious.rsc, only that the cpu goes to 100% and shortly thereafter the RB restarts without importing the list.
I tried to halve the list and that matters without problems.
How can I solve the problem?

On the 750b3b and other rb it does not give me problems

thank you
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 10:40 am

What is this list and where did you get it? Why are you trying to import it?
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 10:55 am

this is the list of ip's to block
/tool fetch address=www.squidblacklist.org host=www.squidblacklist.org mode=http src-path=/downloads/drop.malicious.rsc dst-path=drop.malicious.rsc
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 11:00 am

That list is very big, and should be used on carrier class routers, not in home routers.
I don't recommend blindly importing configuration from the internet.
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 11:05 am

do you have a better solution to offer me?
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 11:10 am

Depends on what you want to do and why. Two choices:

1. Use smarter configuration, just allow known IP addresses and block all others.
2. Use more powerful device, like a CCR, if you are an ISP and need to block individual addresses in thousands
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 11:19 am

I use the rb both in 2011 and 3011 as a hotspot and as a firewall router, I use the dns of flashstart and sometimes those of opendns. I also wanted to add ip addresses to be blocked as ramsonware.
I always wanted to stay on mikrotik because I find it very versatile as RB
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 11:23 am

In name RB2011iL, the letter "L" means "Lite". It is a low cost home router, not a Firewall/Hotspot device. It's also an old model. You need something more powerful to do what you want.
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 3:18 pm

do you have any model to recommend for managing about 10 seats?
I would not spend much
thank you
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 3:30 pm

What are you trying to do? Why do you need to block thousands of IP addresses, if you only manage 10 devices? Your firewall is not optimal for this type of setup.
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 3:41 pm

I just want to block further malevolent IPs where it can lurk threats on the web.
I have already configured mikrotik for the filter for port scans and blocking from outside, I just wanted to add an extra filter
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24206
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 3:50 pm

if you have "drop all" rule, there is no need for this list, they are already blocked.
No answer to your question? How to write posts
 
tigro11
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 68
Joined: Tue Feb 20, 2018 12:31 am

Re: Error import drop.malicious.rsc on RB2011iL

Tue Nov 20, 2018 4:12 pm

ok thank you, I thought they would help to protect the navigation or sending as much key request to activate the criptolocker locally.
rry if I take advantage of your valuable help, could you tell me where to find a good firewall configuration to protect navigation?

Who is online

Users browsing this forum: Majestic-12 [Bot], MSN [Bot] and 5 guests