Thanks all for your input. In our use case, we use our main Mikrotik router as a sort of 'honeypot' and we also block traffic to all downstream routers as well. So, in this case, we'd rather 'detect and block' rather than 'avoid'. I'm a little afraid of using 'tarpit' as I've heard that uses local (...

Hi, I don't understand "It's working correctly." But thank you for your response. I estimate I'm getting about 200 attempts per hour with 3 attempts per (source, attacker) IP adddress and the same three usernames being attempted by all attackers. Overnight, the usernames have changed to 'r...

Hi, Our primary router is under attack by a botnet. I see this sort of messages at the router console: [admin@my-router] > / echo: system,error,critical login failure for user ftpuser from 91.135.238.186 via ssh [admin@my-router] > / echo: system,error,critical login failure for user admin from 91.1...

Hi, (Internet) <---> [MT Router] <--fiber--> [CRS125] <-- two separate IP subnets I want the CRS to route two separate IP subnets (one private and one public) and I need to filter the traffic (firewall) separately. Basically, I want to use the SFP port as the uplink and break the unit into two separ...

Well, I worked it out for myself. I'm no programmer and there is probably a better way, but here is what I used to enumerate the Ethernet ports and add them to the bridge: # # Set up the bridge and add the interfaces if required. # :if ( $internalinterface = $bridgeinterface ) do={ /interface bridge...

Hi, I'm trying to add "the rest of the Ethernet ports" to the bridge in a script where ether1 will be the WAN interface and ether2 will be the master bridge port. This works, but I'd like to enumerate the ports rather than statically add lines: # # Set up the bridge and add the interfaces ...

Maybe needs a '$' in front of the 'z'?

Just guessin'

G