https://it-arts.net/index.php?action=history&feed=atom&title=MIKROTIK_-_Bruteforce_SSH_Firewall_Rules 2026-05-02T18:47:48Z Revision history for this page on the wiki MediaWiki 1.44.2 https://it-arts.net/index.php?title=MIKROTIK_-_Bruteforce_SSH_Firewall_Rules&diff=882&oldid=prev 2026-01-17T07:05:55Z

<p>Text replacement - &quot;<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a>&quot; to &quot;<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a> &#039;&#039;&#039;&#039;&#039;[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]&#039;&#039;&#039;&#039;&#039; &quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 07:05, 17 January 2026</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:Wiki]]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[Category:Wiki]]</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SSH BRUTEFORCE PREVENTION FIREWALL RULES FOR MIKROTIK&lt;br /&gt;(Aka Fail2ban)</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SSH BRUTEFORCE PREVENTION FIREWALL RULES FOR MIKROTIK&lt;br /&gt;(Aka Fail2ban)</div></td></tr> </table>

Admin https://it-arts.net/index.php?title=MIKROTIK_-_Bruteforce_SSH_Firewall_Rules&diff=438&oldid=prev 2025-12-11T15:37:17Z

<p>Text replacement - &quot;<a href="/index.php?title=Category:Post-It&amp;action=edit&amp;redlink=1" class="new" title="Category:Post-It (page does not exist)">Category:Post-It</a>&quot; to &quot;<a href="/index.php/Category:Wiki" title="Category:Wiki">Category:Wiki</a>&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 15:37, 11 December 2025</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<del style="font-weight: bold; text-decoration: none;">Post-It</del>]]</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<ins style="font-weight: bold; text-decoration: none;">Wiki</ins>]]</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SSH BRUTEFORCE PREVENTION FIREWALL RULES FOR MIKROTIK&lt;br /&gt;(Aka Fail2ban)</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>SSH BRUTEFORCE PREVENTION FIREWALL RULES FOR MIKROTIK&lt;br /&gt;(Aka Fail2ban)</div></td></tr> </table>

Admin https://it-arts.net/index.php?title=MIKROTIK_-_Bruteforce_SSH_Firewall_Rules&diff=62&oldid=prev 2024-05-01T11:55:43Z

<p></p> <p><b>New page</b></p><div>[[Category:Post-It]]<br /> <br /> SSH BRUTEFORCE PREVENTION FIREWALL RULES FOR MIKROTIK&lt;br /&gt;(Aka Fail2ban)<br /> <br /> <br /> <br /> == SSH IP Whitelist ==<br /> <br /> Create the whitelist and add RFC1918 addresses :<br /> <br /> &lt;nowiki&gt;<br /> /ip/firewall/address-list/add list=LIST_SSH_WHITELIST address=10.0.0.0/8 comment=&quot;RFC1918_extended&quot;<br /> /ip/firewall/address-list/add list=LIST_SSH_WHITELIST address=100.64.0.0/10 comment=&quot;RFC1918_extended&quot;<br /> /ip/firewall/address-list/add list=LIST_SSH_WHITELIST address=172.16.0.0/12 comment=&quot;RFC1918_extended&quot;<br /> /ip/firewall/address-list/add list=LIST_SSH_WHITELIST address=192.168.0.0/16 comment=&quot;RFC1918_extended&quot;&lt;/nowiki&gt;<br /> <br /> Add the administrators IP :<br /> <br /> &lt;nowiki&gt;<br /> /ip/firewall/address-list/add list=LIST_SSH_WHITELIST address=W.X.Y.Z comment=&quot;admin@example.org&quot;<br /> ...&lt;/nowiki&gt;<br /> <br /> <br /> <br /> == SSH Firewall Rules For Port 2222 ==<br /> <br /> &lt;nowiki&gt;<br /> /ip/firewall/filter/add action=add-src-to-address-list address-list=BRUTEFORCE_BLACKLIST address-list-timeout=1d chain=input comment=&quot;Blacklist&quot; connection-state=new dst-port=2222 protocol=tcp src-address-list=LIST_ALL_SSH_CONNECTIONS3,!LIST_SSH_WHITELIST<br /> <br /> /ip/firewall/filter/add action=add-src-to-address-list address-list=connection3 address-list-timeout=1h chain=input comment=&quot;Third attempt&quot; connection-state=new dst-port=2222 protocol=tcp src-address-list=LIST_ALL_SSH_CONNECTIONS2,!LIST_SSH_WHITELIST<br /> <br /> /ip/firewall/filter/add action=add-src-to-address-list address-list=connection2 address-list-timeout=15m chain=input comment=&quot;Second attempt&quot; connection-state=new dst-port=2222 protocol=tcp src-address-list=LIST_ALL_SSH_CONNECTIONS1,!LIST_SSH_WHITELIST<br /> <br /> /ip/firewall/filter/add action=add-src-to-address-list address-list=connection1 address-list-timeout=1m chain=input comment=&quot;First attempt&quot; connection-state=new dst-port=2222 protocol=tcp src-address-list=!LIST_SSH_WHITELIST<br /> <br /> /ip/firewall/filter/add action=accept chain=input dst-port=2222 protocol=tcp src-address-list=!BRUTEFORCE_BLACKLIST&lt;/nowiki&gt;<br /> <br /> <br /> <br /> == Usefull Links ==<br /> <br /> BRUTEFORCE PREVENTION :<br /> * https://help.mikrotik.com/docs/display/ROS/Bruteforce+prevention</div>

imported>Z