API tools faq
paste
BhieNEka

Drop Brute Force on Mikrotik

BhieNEka
Jul 14th, 2014
590
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.62 KB | None | 0 0
raw download clone embed print report
  1. /ip firewall filter
  2. add chain=input protocol=tcp dst-port=21 src-address-list=black_list action=drop \
  3. comment="drop ftp brute forcers" disabled=no
  4. add chain=input protocol=tcp dst-port=21 connection-state=new \
  5. src-address-list=ftp_stage3 action=add-src-to-address-list address-list=black_list address-list-timeout=1d \
  6. comment="" disabled=no
  7. add chain=input protocol=tcp dst-port=21 connection-state=new \
  8. src-address-list=ftp_stage2 action=add-src-to-address-list address-list=ftp_stage3 address-list-timeout=1h \
  9. comment="" disabled=no
  10. add chain=input protocol=tcp dst-port=21 connection-state=new \
  11. src-address-list=ftp_stage1 action=add-src-to-address-list address-list=ftp_stage2 address-list-timeout=5m \
  12. comment="" disabled=no
  13. add chain=input protocol=tcp dst-port=21 connection-state=new \
  14. action=add-src-to-address-list address-list=ftp_stage1 address-list-timeout=1m comment="" \
  15. disabled=no
  16.  
  17.  
  18. /ip firewall filter
  19. add chain=input protocol=tcp dst-port=22 src-address-list=black_list action=drop \
  20. comment="drop ssh brute forcers" disabled=no
  21. add chain=input protocol=tcp dst-port=22 connection-state=new \
  22. src-address-list=ssh_stage3 action=add-src-to-address-list address-list=black_list address-list-timeout=1d \
  23. comment="" disabled=no
  24. add chain=input protocol=tcp dst-port=22 connection-state=new \
  25. src-address-list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 address-list-timeout=1h \
  26. comment="" disabled=no
  27. add chain=input protocol=tcp dst-port=22 connection-state=new \
  28. src-address-list=ssh_stage1 action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=5m \
  29. comment="" disabled=no
  30. add chain=input protocol=tcp dst-port=22 connection-state=new \
  31. action=add-src-to-address-list address-list=ssh_stage1 address-list-timeout=1m comment="" \
  32. disabled=no
  33.  
  34. /ip firewall filter
  35. add chain=input protocol=tcp dst-port=23 src-address-list=black_list action=drop \
  36. comment="drop telnet brute forcers" disabled=no
  37. add chain=input protocol=tcp dst-port=23 connection-state=new \
  38. src-address-list=telnet_stage3 action=add-src-to-address-list address-list=black_list address-list-timeout=1d \
  39. comment="" disabled=no
  40. add chain=input protocol=tcp dst-port=23 connection-state=new \
  41. src-address-list=telnet_stage2 action=add-src-to-address-list address-list=telnet_stage3 address-list-timeout=1h \
  42. comment="" disabled=no
  43. add chain=input protocol=tcp dst-port=23 connection-state=new \
  44. src-address-list=telnet_stage1 action=add-src-to-address-list address-list=telnet_stage2 address-list-timeout=5m \
  45. comment="" disabled=no
  46. add chain=input protocol=tcp dst-port=23 connection-state=new \
  47. action=add-src-to-address-list address-list=telnet_stage1 address-list-timeout=1m comment="" \
  48. disabled=no
  49.  
  50. /ip firewall filter
  51. add chain=input protocol=tcp dst-port=80 src-address-list=black_list action=drop \
  52. comment="drop web brute forcers" disabled=no
  53. add chain=input protocol=tcp dst-port=80 connection-state=new \
  54. src-address-list=web_stage3 action=add-src-to-address-list address-list=black_list address-list-timeout=1d \
  55. comment="" disabled=no
  56. add chain=input protocol=tcp dst-port=80 connection-state=new \
  57. src-address-list=web_stage2 action=add-src-to-address-list address-list=web_stage3 address-list-timeout=1h \
  58. comment="" disabled=no
  59. add chain=input protocol=tcp dst-port=80 connection-state=new \
  60. src-address-list=web_stage1 action=add-src-to-address-list address-list=web_stage2 address-list-timeout=5m \
  61. comment="" disabled=no
  62. add chain=input protocol=tcp dst-port=80 connection-state=new \
  63. action=add-src-to-address-list address-list=web_stage1 address-list-timeout=1m comment="" \
  64. disabled=no
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!