Untuk melindungi Router dari orang yang melakukan port
Scanners, kita dapat menambahkan filter berikut pada router Mikrotik kita.
Berikut konfigurasinya.
/ip firewall filter
add chain=input protocol=tcp psd=21,3s,3,1
action=add-src-to-address-list address-list="port_scanners_list"
address-list-timeout=30d comment="Port scanners to list "
disabled=yes
add chain=input protocol=tcp
tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list
address-list="port_scanners_list" address-list-timeout=30d comment="NMAP
FIN Stealth scan" disabled=yes
add chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list="port_scanners_list"
address-list-timeout=30d comment="SYN/FIN scan" disabled=yes
add chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list="port_scanners_list"
address-list-timeout=30d comment="SYN/RST scan" disabled=yes
add chain=input protocol=tcp
tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list
address-list="port_scanners_list" address-list-timeout=30d
comment="FIN/PSH/URG scan" disabled=yes
add chain=input protocol=tcp
tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list
address-list="port_scanners_list" address-list-timeout=30d
comment="ALL/ALL scan" disabled=yes
add chain=input protocol=tcp
tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list
address-list="port_scanners_list" address-list-timeout=30d
comment="NMAP NULL scan" disabled=yes
add chain=input src-address-list="port_scanners_list"
action=drop comment="dropping port scanners" disabled=yes
Demikian tutorial yang dapat kami sampaikan mengenai cara
drop port scanners pada mikrotik. Selamat mencoba.
0 komentar:
Post a Comment