Mikrotik DDoS Protection with live proof | How do I protect my MikroTik router from DDoS attacks?

Mikrotik DDoS Protection




Here I am going to discuss two method to protect DDoS Attack to your loveble Mikrotik router.

Method - 1

Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> input
Protocol -> 6 tcp
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> add src to address list
Address List -> DDoS_IP_List (Type here)
Timeout -> 24:00:00
Comment
DDoS Protection by KarimZI - 1

Again
Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> input
Protocol -> 6 tcp
Advanced
src Address List -> DDoS_IP_List (Select)
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> tarpit

Comment
DDoS Protection by KarimZI - 2

Method - 2

Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> forward
Protocol -> 6 tcp
Advanced
TCP Rage
TCP Rage -> syn
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> add src to address list
Address List -> DDoS_IP_List (Type here)
Timeout -> 24:00:00
Comment
DDoS Protection by KarimZI - 2

then

Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> input
Protocol -> 6 tcp
Advanced
TCP Rage
TCP Rage -> syn
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> add src to address list
Address List -> DDoS_IP_List (Type here)
Timeout -> 24:00:00
Comment
DDoS Protection by KarimZI - 2

then

Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> forward
Protocol -> 6 tcp
Advanced
src Address List -> DDoS_IP_List (Select Your created list)
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> tarpit

Comment
DDoS Protection by KarimZI - 3

then
Go to IP -> Filter Rule -> Add new Rule ->
General
Chain -> input
Protocol -> 6 tcp
Advanced
src Address List -> DDoS_IP_List (Select Your created list)
Extra
Connection Limit
Limit 32
Netmask 32
Action
Action -> tarpit

Comment
DDoS Protection by KarimZI - 3

video tutorial


Comments