You create a second address list with your address to white-list with a rule that is accepted, before the blacklist rule drops the traffic. No way to create a script that parses only last entries from the log, without going to parse everytime entire logs? ( think I have seen something like "-5...

Same warnings:

Thank you for the script.
I have tested and works great, but there is a trouble.
When a remove a blacklist entry, at the next script run it will put again the blacklist entry. How to avoid this?

I have already maded one similar script, I just need to modify it to do what required from OP:

how to configure the number of attempts before they goes in blacklist?

I prefer a script that will put in a blacklist all the usernames login attempts (more than 3 attempts) that are not users of the system.

I have got a mikrotik router configured with a lan ip address on bridge interface of 10.0.1.1 - 255.255.255.0. All the devices in the subnet 10.0.1.1-10.0.1.255 are both pinging router and reaching internet. Now I want to add retrocompatibility for some devices which has got 10.0.5.4 address with su...