Community discussions

MikroTik App
 
balanila
just joined
Topic Author
Posts: 16
Joined: Sun Aug 25, 2013 12:45 pm
Location: Moldova, Chishinev

Mikrotik and dynamic address list

Tue Oct 29, 2013 2:38 pm

Hello!
Is it possible to add a function that would address list with dynamic addresses that are added by a time, was not cleared after restarting the router?

I have a rule that collects addresses that brute force me. The lifetime of address 10 days. This week recruited thousands of addresses, and after a reboot all is lost.

It would be nice, what would these addresses will not disappear.
Or make the button "Make statik"

Thanx
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26912
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Re: Mikrotik and dynamic address list

Tue Oct 29, 2013 2:47 pm

share the script that you use, simply adding to the address list, will put it there permanently. but maybe you use some other approach.
 
balanila
just joined
Topic Author
Posts: 16
Joined: Sun Aug 25, 2013 12:45 pm
Location: Moldova, Chishinev

Re: Mikrotik and dynamic address list

Tue Oct 29, 2013 3:44 pm

Here's the code.

add action=reject chain=forward comment="Drop wp-login.php" dst-address=\
    192.168.30.18 dst-port=80 in-interface=ether1-gateway protocol=tcp \
    reject-with=tcp-reset src-address-list=web_ip
add action=add-src-to-address-list address-list=web_ip address-list-timeout=\
    1w3d3h chain=forward comment="Add wp-login to list" content=\
    wp-login.php dst-address=192.168.30.18 dst-port=80 in-interface=\
    ether1-gateway protocol=tcp
Even the code from Mikrotik wiki about ssh brute force just adds to the address list for 10 days, after the restart, these addresses are disappearing, and want, what would these addresses are not deleted after restarting the router, and deleting after 10 days.
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: Mikrotik and dynamic address list

Tue Oct 29, 2013 9:33 pm

Well, the list will get populated again automatically, so I don't see the need to save it.
 
farshidar
just joined
Posts: 2
Joined: Fri Mar 28, 2014 5:05 pm

Re: Mikrotik and dynamic address list

Fri Mar 28, 2014 5:18 pm

Hi
I have Same problem and needs for save my last resort of IP addresses
this becomes sometimes a critical security failure.
 
User avatar
hartleigh
just joined
Posts: 8
Joined: Thu Jul 24, 2014 6:38 am
Location: Brisbane, Australia

Re: Mikrotik and dynamic address list

Thu Jul 24, 2014 6:51 am

Hi all,

A little late to the party but just wondering if you ever resolved this - dynamic lists saved to memory/storage to survive a reboot?
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: Mikrotik and dynamic address list

Thu Jul 24, 2014 6:22 pm

Now, when the date and time is saved I would also appreciate the dynamic ip list saving regularly. And what's more, saving interface and queue statistics would be very useful. I would like to see that accidental power loss will not make reset of all counters.

Who is online

Users browsing this forum: coreywithne, ech, Tchonangauz and 30 guests