This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
networking:router:mikrotik_under_attack [2014/06/03 15:44] gcooper |
networking:router:mikrotik_under_attack [2014/06/03 16:08] (current) gcooper |
||
---|---|---|---|
Line 55: | Line 55: | ||
http:// | http:// | ||
+ | |||
+ | :!: This sample rule set is on the '' | ||
:!: This rule set uses '' | :!: This rule set uses '' | ||
+ | |||
+ | :!: You can also easily exclude (whitelist) certain hosts. | ||
This example dynamically creates two address lists: attackers ('' | This example dynamically creates two address lists: attackers ('' | ||
Line 66: | Line 70: | ||
comment=" | comment=" | ||
| | ||
- | add chain=detect-ddos action=return dst-limit=50, | + | add chain=detect-ddos action=return dst-limit=50, |
comment=" | comment=" | ||
| | ||
Line 76: | Line 80: | ||
| | ||
add chain=forward action=drop connection-state=new dst-address-list=ddos-target \ | add chain=forward action=drop connection-state=new dst-address-list=ddos-target \ | ||
- | src-address-list=ddos-source comment=" | + | src-address-list=ddos-source comment=" |
</ | </ | ||