How to Detect Infected or Spammers user and temporary block using Mikrotik router Firewall Configuration

This article showing up how to auto detects and blocks SMTP viruses or spammers and block temporary block.

Using mikrotik firewall configuration.This  configuration  tale to mikrotik router when a user send up to 50 email per 1day then mikrotik detect spammer and block that ip address in one weeks .

[admin@mikrotikroutersetup.blogspot.com] /ip firewall filter>

                                                                      

 Add chain=forward action=drop protocol=tcp src-address-list=spamm-user      dst-port=25

 add   chain=forward action=add-src-to-address-list protocol=tcp    address-list=spamm-user address-list-timeout=1w dst-port=25      connection-limit=50,32

[admin@mikrotikroutersetup.blogspot.com] /ip firewall filter>