See for video configuration: http://www.youtube.com/watch?v=Won9MFyxnC8
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=0.0.0.0/8
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=100.64.0.0/64
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=127.0.0.0/8
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=169.254.0.0/16
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=172.16.0.0/12
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=192.168.0.0/16
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=192.0.0.0/24
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=198.18.0.0/15
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=192.168.51.100.0/24
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=203.0.112.0/24
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> add list=BOTNET address=224.0.0.0/3
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
address-list> print
Flags: X - disabled, D - dynamic 
 #   LIST                                                                                         ADDRESS 
 0   BOTNET                                                                                  0.0.0.0/8
 0   BOTNET                                                                                  100.64.0.0/10 
 0   BOTNET                                                                                  127.0.0.0/8 
 0   BOTNET                                                                                  169.254.0.0/16 
 0   BOTNET                                                                                  172.16.0.0/12
 0   BOTNET                                                                                  192.0.0.0/24 
 0   BOTNET                                                                                  192.168.0.0/16
 0   BOTNET                                                                                  198.18.0.0/15 
 0   BOTNET                                                                                  198.51.100.0/24 
 0   BOTNET                                                                                  203.0.112.0/24 
10   BOTNET                                                                                 
224.0.0.0/3 
[Laxmi@mikrotikroutersetup.blogspot.com] > ip firewall
filter >
add chain=forward action=drop src-address-list=BOTNET
comment="Drop all botnet ip address incoming"
add chain=forward action=drop src-address-list=BOTNET
comment="Drop All botnet ip address outgoing"
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
filter> print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Drop all botnet ip address incoming
     chain=forward
action=drop src-address-list=BOTNET 
 1   ;;; Drop All botnet ip address outgoing
     chain=forward
action=drop dst-address-list=BOTNET 
[Laxmi@mikrotikroutersetup.blogspot.com] /ip firewall
filter> 
No comments:
Post a Comment