findabta.blogg.se

"Bruteforce login prevention(ftp: 530 Login incorrect to ftp_blacklist)" content="530 Login incorrect" protocol=tcpĪdd action=add-src-to-address-list address-list=SSH_BlackList_1 address-list-timeout=1m chain=input comment="Drop SSH&TELNET Brute Forcers" connection-state=new dst-port=\Īdd action=add-src-to-address-list address-list=SSH_BlackList_2 address-list-timeout=1m chain=input connection-state=new dst-port=22-23 protocol=tcp src-address-list=\Īdd action=add-src-to-address-list address-list=SSH_BlackList_3 address-list-timeout=1m chain=input connection-state=new dst-port=22-23 protocol=tcp src-address-list=\Īdd action=add-src-to-address-list address-list=IP_BlackList address-list-timeout=1d chain=input connection-state=new dst-port=22-23 protocol=tcp src-address-list=\Īdd action=drop chain=input dst-port=22-23 protocol=tcp src-address-list=IP_BlackListĪdd action=drop chain=input comment="BRUTEFORCE LOGIN PREVENTION (WINBOX: DROP WINBOX BRUTE FORCERS" dscp=0 dst-port=8291 protocol=tcp src-address-list=winbox_blacklistĪdd action=add-src-to-address-list address-list=winbox_blacklist address-list-timeout=2w1d chain=input comment=\ Add action=accept chain=forward src-mac-address=XX:XX:XX:XX:XX:XXĪdd action=drop chain=input comment="BRUTEFORCE LOGIN PREVENTION (FTP: DROP FTP BRUTE FORCERS)" dst-port=21 protocol=tcp src-address-list=ftp_blacklistĪdd action=accept chain=output comment="Bruteforce login prevention(ftp: 530 Login incorrect to limit dst address)" content="530 Login incorrect" dst-limit=\Īdd action=add-dst-to-address-list address-list=ftp_blacklist address-list-timeout=3h chain=output comment=\