SSH Firewall regel tegen - Brute Force Aanval

/ip firewall filter
add action=drop chain=input src-address-list=blacklist

add action=log chain=input connection-state=new dst-port=22 \
    log-prefix="SSH Brute Force Blokkade" protocol=tcp src-address-list=ssh_stage3

add action=add-src-to-address-list address-list=blacklist \
    address-list-timeout=4w chain=input comment="Blokkade SSH 4e Poging" \
    connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage3

add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1m chain=input comment="Log SSH 3e Poging" \
    connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage2

add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1m chain=input comment="Log SSH 2e Poging" \
    connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage1

add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1m chain=input comment="Log SSH 1e Poging" \
    connection-state=new dst-port=22 protocol=tcp