Etiket: firewall

Global ASN Filtering with MikroTik RouterOS 7

Are you a MikroTik RouterOS 7 user? Do you want to have better control over your network traffic worldwide? Check out this project I’ve been working on!

🛡️ What is it? 🛡️
This project provides a rule set for MikroTik RouterOS 7 users to filter network traffic by Autonomous System Numbers (ASNs) on a global scale. Whether you want to restrict or route your network traffic to specific providers worldwide, this rule set can help you achieve it.

🔧 How to Use 🔧
Log in to your MikroTik management interface.
Navigate to “/routing/filter/num-list”.
Use the provided examples to add the ASNs you need or define new ones.
Save your changes and apply them to your routing policies.
That’s it! You now have a powerful rule set to control network traffic based on specific ASNs globally.

🚀 Why Use It? 🚀
This resource empowers MikroTik RouterOS 7 users to filter by ASNs worldwide, offering flexibility and control over their network infrastructure. Take a closer look at the rule set, customize it to your specific needs, and contribute to enriching this open-source project.

🌍 Get Started 🌍

https://github.com/alptekinsunnetci/MikroTik-RouterOS/tree/main/BGP-Country-Filter

Share your feedback, suggestions, or contributions to make this tool even more powerful for the community. Let’s build a better-connected world together!

Mikrotik için RDP Koruması

/ip firewall filter

add chain=forward protocol=tcp dst-port=3389 src-address-list=rdp_blacklist action=drop \
comment="drop rdp brute forcers" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new \
src-address-list=rdp_stage3 action=add-src-to-address-list address-list=rdp_blacklist \
address-list-timeout=10d comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new \
src-address-list=rdp_stage2 action=add-src-to-address-list address-list=rdp_stage3 \
address-list-timeout=1m comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new src-address-list=rdp_stage1 \
action=add-src-to-address-list address-list=rdp_stage2 address-list-timeout=1m comment="" disabled=no

add chain=forward protocol=tcp dst-port=3389 connection-state=new action=add-src-to-address-list \
address-list=rdp_stage1 address-list-timeout=1m comment="" disabled=no

Mikrotik için DDoS Firewall Kuralı

/ip firewall raw


add chain=prerouting action=jump jump-target=block-ddos protocol=tcp tcp-flags=syn


add chain=prerouting src-address-list=ddoser dst-address-list=ddosed action=drop


add chain=block-ddos dst-limit=50,50,src-and-dst-addresses/10s action=return


add chain=block-ddos action=add-dst-to-address-list address-list=ddosed address-list-timeout=10m


add chain=block-ddos action=add-src-to-address-list address-list=ddoser address-list-timeout=10m