Showing posts with label Routers. Show all posts
Showing posts with label Routers. Show all posts

Mikrotik Routers Protection from Bruteforce Attacking

It's very important to protect your devices, routers from bruteforce attacking. If you have big competition in your area and you have many doubts that some body can try to hack your system, you must prepare for it. Use some cool scripts that prevent your mikrotik router from bruteforce attacking.





/ip firewall filter 
add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop \
comment="drop ftp brute forcers"

add chain=output action=accept protocol=tcp content="530 Login incorrect" dst-limit=1/1m,9,dst-address/1m

add chain=output action=add-dst-to-address-list protocol=tcp content="530 Login incorrect" \
address-list=ftp_blacklist address-list-timeout=3h


This will prevent a SSH brute forcer to be banned for 10 days after repetitive attempts. Change the timeouts as necessary.


/ip firewall filter

add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute forcers" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=10d comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage1 \
action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-to-address-list \
address-list=ssh_stage1 address-list-timeout=1m comment="" disabled=no

If you want to block downstream access as well, you need to block the with the forward chain:

add chain=forward protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute downstream" disabled=no

Mikrotik Loadbalancing 2 WAN 1 LAN Full Script Download Backup

First of all change the interfaces name set as Local, wlan1 and wlan2 and then open new terminal from winbox and paste bellow code there. All settings successfully done.






/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local 
add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=wlan2
add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=wlan1

/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1,10.112.0.1 check-gateway=ping 

/ ip firewall nat 
add chain=srcnat out-interface=wlan1 action=masquerade
add chain=srcnat out-interface=wlan2 action=masquerade

/ ip firewall mangle
add chain=input in-interface=wlan1 action=mark-connection new-connection-mark=wlan1_conn
add chain=input in-interface=wlan2 action=mark-connection new-connection-mark=wlan2_conn
add chain=output connection-mark=wlan1_conn action=mark-routing new-routing-mark=to_wla1    
add chain=output connection-mark=wlan1_conn action=mark-routing new-routing-mark=to_wla2    

/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_wla1 
add dst-address=0.0.0.0/0 gateway=10.111.0.2 routing-mark=to_wla2

TP Link 5210 Firmware Download and Upgrade


Download this version and upgrade into your TP Link 5210 devices. Note this firmware is only for V1 versions. 


Now GET 3G 4G WiFi Signal Everywhere and Enjoy Internet

This is ZTE MF65 pocket wifi router that allows to get wifi signal everywhere where you want. You can connect 10 devices to this router and enjoy internet every where.
This is chargeable and no need to electric every time.

Ye ZTE ka 3G WiFi router hai jis k zariye ap wifi 3G k signal har jaga hasil kar sakty hain aur es per aap 10 devices connect kar k net use kar sakty hain aur es ki charging taqreban 6 hours tak hoti hai. Ap es ki battery full charge karin aur us k bad 6 hours tak ap es ko istaml kar sakty hain.

ZTE is known brand in wireless products. WiFi Cloud (Rechargeable battery- Pocket WiFi Unit) supports 4G/3G & 2G. Super Fast Reception with best wifi signal transmit rates.
Price: 8500/-
Order ZTE MF65 WiFi Cloud

- Connect Upto 10 WiFi Devices.
- No Need Power to Use (Charge it and use it like mobile phone).
- Battery 5-6 Working hours (180+ hours of Stand By Mode).
- Micro SD Slot 32GB & Web Based File Sharing.
- DHCP (Auto Assign Ip System) , DNS Relay & NAT.
- No Driver/No Cd Installation Required.

System / Network Support:

HSPA+ / HSUPA / HSDPA / UMTS 2100/ 1900 / 900 / 850

Edge / GPRS / GSM 850/ 900 / 1800 / 1900

Auto Network Selection / APN Selection
(All Sim Supported - Universal GSM unlock with all networks)

Speed Rate:
Downloading Speed 21.6Mbps and Uploading 5.76Mbps.

WiFi Band:
Auto Pick - 802.11b/g/n, 10 Connections at a same time.

Operating System:
Windows Xp, Windows 7, Windows 8, Vista, Linux and MAC OS and No operating system restriction (if using WiFi)