Skip to content

Instantly share code, notes, and snippets.

@marvin

marvin/mikrotik_ddos_TCP.rsc

Last active November 8, 2019 05:45
Show Gist options
  • Save marvin/7b93dd885630c3dc43f3527a0f17ed83 to your computer and use it in GitHub Desktop.
Save marvin/7b93dd885630c3dc43f3527a0f17ed83 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
mikrotik_ddos_TCP.rsc
/ip firewall filter
add action=reject chain=forward comment="DROP DDOS-TCP ACCESS LIST" log-prefix=BLACKLIST reject-with=icmp-port-unreachable src-address-list=DDOSER-UDP
add action=add-src-to-address-list address-list=DDOSER-TCP address-list-timeout=1w chain=forward connection-limit=50,32 dst-address-list=MISAXNET protocol=tcp
add action=add-src-to-address-list address-list=DDOSER-TCP address-list-timeout=1h chain=forward dst-address-list=MISAXNET dst-limit=50,32,src-and-dst-addresses/1h \
protocol=tcp dst-port=587
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment