How to autodetect infected or spammer users and temporary block the SMTP output mikrotik

/ip firewall filter

add chain=forward protocol=tcp dst-port=25 src-address-list=spammer
action=drop comment="BLOCK SPAMMERS OR INFECTED USERS"

add chain=forward protocol=tcp dst-port=25 connection-limit=30,32 limit=50,5 action=add-src-to-address-list
address-list=spammer address-list-timeout=1d comment="Detect and add-list SMTP virus or spammers"

 

http://forum.mikrotik.com/viewtopic.php?t=109662

add chain=tcp protocol=tcp dst-port=25 action=add-src-to-address-list \
comment=»add src smtp»

add chain=tcp protocol=tcp dst-port=465 action=add-src-to-address-list \
comment=»add src smtp»

add chain=udp protocol=udp dst-port=587 action=add-src-to-address-list \
comment=»add src smtp»

add chain=udp protocol=udp dst-port=25 action=add-src-to-address-list \
comment=»add src smtp»

add chain=udp protocol=udp dst-port=465 action=add-src-to-address-list \
comment=»add src smtp»

add chain=udp protocol=udp dst-port=587 action=add-src-to-address-list \
comment=»add src smtp»

  1. Пока комментариев нет.

  1. Пока что обратных ссылок нет.