We have an issue when a user is infected with a virus that floods the interface with very high pps counts of icmp or udp on the order of 2200+ pps which causes the interface to virtually stop.
We can access the router fine, but in order to stop the offending user we need to get to the segment they are on and it is effectively disabled by the attack.
Is there a way to limit the max pps per ip? I have looked around the forum with no luck.
Has anyone had this issue? Any help is appreciated.
Thank you.

See the following thread: http://forum.mikrotik.com//viewtopic.php?t=1588