Mikrotik Router Firewall Brute Force Attack Prevention | DDOS Attack
A brute force attack is crypto analytic attack that can, it used against any encrypt data. It checks systematically checking all possible password until the correct one is found.
This example provides how to prevent FTP Brute force login in mikrotik router.
This configuration allows only 10 FTP login incorrect per hour.
Prevent DDOS Attack
/ip firewall address-list add list=Block_spam address=192.168.1.0/24
/ip firewall filter
Add chain=input action=drop protocol=tcp src-address-list=Block_spam
dst-port=21
add chain=output action=accept protocol=tcp content=Error FTP Login
dst-limit=1/1h,9,dst-address/1h
add chain=output action=add-dst-to-address-list protocol=tcp
address-list= Block_spam address-list-timeout=1h
Comments
Post a Comment