poradim ti fintu, ako odfiltrovat spam aby si sa o to uz nemusal starat.. takychto spamerov je denne niekolko a zakazdym pridavat nove ipcky do listu je nepohodlne...
hod si do firewallu tieto 3 pravidla... (/ip firewall filter)
Code: › chain=input action=drop protocol=tcp src-address-list=BlockSSHSpam dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=SSH_BF2 address-list=BlockSSHSpam address-list-timeout=1w3d dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=SSH_BF1 address-list=SSH_BF2 address-list-timeout=10s dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp address-list=SSH_BF1 address-list-timeout=10s dst-port=22
Timeouty si mozes pomenit podla potrieb. Toto ti bude generovat address-list so spamermi a kazdy, kto sa behom 20 sekund pokusi 3x pripojit na porte 22 bude na 10 dni pridany do blacklistu. Pravidla musia byt v uvedenom poradi, aby to spravne fungovalo, takze vkladat odzadu alebo potom zmenit poradie cez winbox... |