MikroTik • Mikrotik and syn flood attacks‎

Page 1 of 1

Mikrotik and syn flood attacks‎ [SOLVED]

Posted: Wed Jan 19, 2005 8:53 am

by jumping

Hi !

It is possible to detect flood attacks and to end them?

Thanks...

Re: Mikrotik and syn flood attacks‎

Posted: Wed Jan 19, 2005 3:36 pm

by Roman

this should help:

 
0   protocol=tcp tcp-options=syn-only limit-count=50 limit-burst=10 limit-time=1s action=accept
1   protocol=tcp tcp-options=syn-only action=drop

place these rules in input or forward chain and play with limit-count to find suitable value for your network