Etiket: ddos

Mikrotik için RDP Koruması

/ip firewall filter

add chain=forward protocol=tcp dst-port=3389 src-address-list=rdp_blacklist action=drop \
comment="drop rdp brute forcers" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new \
src-address-list=rdp_stage3 action=add-src-to-address-list address-list=rdp_blacklist \
address-list-timeout=10d comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new \
src-address-list=rdp_stage2 action=add-src-to-address-list address-list=rdp_stage3 \
address-list-timeout=1m comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new src-address-list=rdp_stage1 \
action=add-src-to-address-list address-list=rdp_stage2 address-list-timeout=1m comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new action=add-src-to-address-list \
address-list=rdp_stage1 address-list-timeout=1m comment="" disabled=no

Mikrotik için DDoS Firewall Kuralı

/ip firewall raw


add chain=prerouting action=jump jump-target=block-ddos protocol=tcp tcp-flags=syn


add chain=prerouting src-address-list=ddoser dst-address-list=ddosed action=drop


add chain=block-ddos dst-limit=50,50,src-and-dst-addresses/10s action=return


add chain=block-ddos action=add-dst-to-address-list address-list=ddosed address-list-timeout=10m


add chain=block-ddos action=add-src-to-address-list address-list=ddoser address-list-timeout=10m