Prihlásiť sa Odoslať Novinky :: FAQ :: Rozšírené vyhľadávanie :: Napísali o nás :: Ankety
Main Menu
· Home
· 
· FAQ
· 
· Diskusia
· 











Main Menu
· Domov

Moduly
· AvantGo
· Downloads
· FAQ
· News
· Recommend Us
· Reviews
· Search
· Sections
· Stats
· Topics
· Top List
· Web Links
· Forum

Jazyk
Výber jazykovej mutácie:



The time now is 29.03.2024 - 00:55


ako zablokovat ip

Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
 
Author Message
marekh
Post subject: ako zablokovat ip  PostPosted: 18.04.2013 - 20:55 #103632
Basic


Joined: Dec 14, 2008
Posts: 87

Poradite mi ako sa da na mikrotiku zablokovat IP ktora sa stale snazi pripojit cez ssh ?
 
 View user's profile Send private message  
Reply with quote Back to top
lukic
Post subject: RE: ako zablokovat ip  PostPosted: 18.04.2013 - 20:56 #103633
Basic


Joined: Máj 15, 2003
Posts: 161

ip firewall filter add src-address=<taipcochcesblokovat> chain=input action=drop
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
JOFO
Post subject: RE: ako zablokovat ip  PostPosted: 19.04.2013 - 08:35 #103636
Majster


Joined: Jan 08, 2006
Posts: 2583

poradim ti fintu, ako odfiltrovat spam aby si sa o to uz nemusal starat.. takychto spamerov je denne niekolko a zakazdym pridavat nove ipcky do listu je nepohodlne...

hod si do firewallu tieto 3 pravidla... (/ip firewall filter)
Code: › chain=input action=drop protocol=tcp src-address-list=BlockSSHSpam dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=SSH_BF2 address-list=BlockSSHSpam address-list-timeout=1w3d dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp src-address-list=SSH_BF1 address-list=SSH_BF2 address-list-timeout=10s dst-port=22
chain=input action=add-src-to-address-list connection-state=new protocol=tcp address-list=SSH_BF1 address-list-timeout=10s dst-port=22

Timeouty si mozes pomenit podla potrieb. Toto ti bude generovat address-list so spamermi a kazdy, kto sa behom 20 sekund pokusi 3x pripojit na porte 22 bude na 10 dni pridany do blacklistu. Pravidla musia byt v uvedenom poradi, aby to spravne fungovalo, takze vkladat odzadu alebo potom zmenit poradie cez winbox...
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
michal321
Post subject: RE: ako zablokovat ip  PostPosted: 23.04.2013 - 17:14 #103683
Basic


Joined: Mar 12, 2013
Posts: 5

Podla mňa úplne jednoducho staci spraviť
IP -> Services
a zmeniť port na ssh Smile napr 2022
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
pedro4444
Post subject: RE: ako zablokovat ip  PostPosted: 24.04.2013 - 08:25 #103684
Ucen


Joined: Júl 15, 2011
Posts: 769

michal321 wrote: ›Podla mňa úplne jednoducho staci spraviť
IP -> Services
a zmeniť port na ssh Smile napr 2022


mas vseliakych robotov ktory prehliadaju a skusaju na ako porte sa nachadza ssh a tym padom ti stale zatazuje tvoju masinu lepsi sposob ako tu uz bol spominany tri razy a dovidenia nech uz neotravuyje moj CPU Smile))
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
Thomas
Post subject: RE: ako zablokovat ip  PostPosted: 24.04.2013 - 10:16 #103685
Majster


Joined: Okt 31, 2006
Posts: 2062
Location: TT
alebo port knocking.
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
Display posts from previous:     
All times are GMT
Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
 
Jump to:  

Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits

(C) SKFree 2002-2010: Powered by POSTNUKE. Môžete prebera? naše správy vo formáte XML(RSS)