Scribd Logo
Upload

Welcome to Scribd!

  • 176 views

    Block Brute Force Attack in Mikrotik Router

    Uploaded by

    Pedro Hernandez
    This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd

    Block Brute Force Attack in Mikrotik Router

    Uploaded by

    Pedro Hernandez
    176 views1 page
    This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

    Original Title

    Block Brute Force Attack in Mikrotik Router.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    176 views1 page

    Block Brute Force Attack in Mikrotik Router

    Uploaded by

    Pedro Hernandez
    This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    of 1

    / ip firewall filter

    add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist


    action=drop comment="Drop SSH Brute Forcers" disabled=no
    add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
    list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist address-
    list-timeout=1d comment="" disabled=no
    add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
    list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 address-
    list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
    list=ssh_stage1 action=add-src-to-address-list address-list=ssh_stage2 address-
    list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-
    to-address-list address-list=ssh_stage1 address-list-timeout=1m comment=""
    disabled=no
    / ip firewall filter
    add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist
    action=drop comment="Drop FTP Brute Forcers" disabled=no
    add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
    list=ftp_stage3 action=add-src-to-address-list address-list=ftp_blacklist address-
    list-timeout=1d comment="" disabled=no
    add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
    list=ftp_stage2 action=add-src-to-address-list address-list=ftp_stage3 address-
    list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
    list=ftp_stage1 action=add-src-to-address-list address-list=ftp_stage2 address-
    list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=21 connection-state=new action=add-src-
    to-address-list address-list=ftp_stage1 address-list-timeout=1m comment=""
    disabled=no
    / ip firewall filter
    add chain=input protocol=tcp dst-port=23 src-address-list=telnet_blacklist
    action=drop comment="Drop Telnet Brute Forcers" disabled=no
    add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
    list=telnet_stage3 action=add-src-to-address-list address-list=telnet_blacklist
    address-list-timeout=1d comment="" disabled=no
    add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
    list=telnet_stage2 action=add-src-to-address-list address-list=telnet_stage3
    address-list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
    list=telnet_stage1 action=add-src-to-address-list address-list=telnet_stage2
    address-list-timeout=1m comment="" disabled=no
    add chain=input protocol=tcp dst-port=23 connection-state=new action=add-src-
    to-address-list address-list=telnet_stage1 address-list-timeout=1m comment=""
    disabled=no

    You might also like