ip firewall filter
add chain=input protocol=tcp dst-port=21,22,23,8291,8728 src-address-list=bruteforce_blacklist action=drop comment="drop brute forcers" disabled=no

add chain=input protocol=tcp dst-port=21,22,23,8291,8728 connection-state=new \
src-address-list=bruteforce_stage3 action=add-src-to-address-list address-list=bruteforce_blacklist address-list-timeout=100d comment="" disabled=no

add chain=input protocol=tcp dst-port=21,22,23,8291,8728 connection-state=new \
src-address-list=bruteforce_stage2 action=add-src-to-address-list address-list=bruteforce_stage3 address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=21,22,23,8291,8728 connection-state=new \
src-address-list=bruteforce_stage1 action=add-src-to-address-list address-list=bruteforce_stage2 address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=21,22,23,8291,8728 connection-state=new action=add-src-to-address-list  address-list=bruteforce_stage1 address-list-timeout=1m comment="" disabled=no