https://wiki.plecko.hr/ 2026-04-25T16:46:08+00:00 https://wiki.plecko.hr/ https://wiki.plecko.hr/lib/tpl/bootstrap3/images/favicon.ico text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:block_invalid_login&rev=1572509100&do=diff Mikrotik: Block invalid SSH and FTP login attempts Paste this into Mikrotik terminal /ip firewall filter add action=log chain=input comment="Drop FTP Brute Force" disabled=no dst-port=21 log-prefix=FTP_DROP protocol=tcp src-address-list=ftp_blacklist add action=drop chain=input comment="Drop FTP Brute Force" disabled=no dst-port=21 protocol=tcp src-address-list=ftp_blacklist add action=accept chain=output comment="Drop FTP Brute Force - Allow 'Incorrect Login' reply" content="530 Login incorr… text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:block_known_viruses&rev=1572509100&do=diff Mikrotik: Block known viruses If you want to stop (some of the) known viruses that always come in through the same port, add some rules to your Mikrotik firewall. Paste this into Mikrotik terminal /ip firewall filter add chain=virus protocol=tcp dst-port=135-139 action=drop comment="Drop Blaster Worm" add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm" add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster Worm" add chain=virus protoco… text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:block_portscanners&rev=1572509100&do=diff Mikrotik: Block port scanners Getting tired of port scanners like I am? Block them with these few simple rules. It is not bullet proof but it will reduce your daily headache. Paste this into Mikrotik terminal /ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-l… text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:clk_sync&rev=1572509100&do=diff Clock synchronization on Mikrotik Create a scheduler with 24-hour interval with the following code: /system clock manual set dst-delta=+01:00 dst-end="jan/01/2020 00:00:00" dst-start="jan/01/1970 00:00:00" time-zone=+01:00 /system ntp client set enabled=yes mode=unicast primary-ntp=192.168.1.12 text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:connected_users_list_to_email&rev=1572509100&do=diff Send a list of connected users to e-mail on Mikrotik If you need a semi-accurate (more often you run it, more accurate it will be) list of active users on your Mikrotik (including wireless and VPN connections), here is a script for you. Set your clock correctly and then create a script: text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:private_dyndns&rev=1572509100&do=diff Privately owned dyndns server (sort of) and Mikrotik If you constantly connect to your home network (as I do), you have, on occasion, experienced that frustrating moment when the dynamic dns service is down for whatever reason. Let’s assume that you are a person who likes to have more controll over the services you use, and have setup your private text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:queue_stats_to_email&rev=1572509100&do=diff Send Queue tree stats to e-mail If you have Queues set up per IP address, you can send yourself Queue stats via email. You might want to see where your bandwidth is going, or you might want to detect who's been making a backup of the internet and preventing other users from using the Internet. text/html 2019-10-31T09:05:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.plecko.hr/doku.php?id=mikrotik:scripting:start&rev=1572509100&do=diff Scripting * Clock synchronization on Mikrotik * Mikrotik: Block invalid SSH and FTP login attempts * Mikrotik: Block known viruses * Mikrotik: Block port scanners * Privately owned dyndns server (sort of) and Mikrotik * Send a list of connected users to e-mail on Mikrotik * Send Queue tree stats to e-mail