Scribd
Upload
1K views1 page

Firewall Rules for Brute Force Protection

This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

Uploaded by

ReyRodriguezPalencia
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
1K views1 page

Firewall Rules for Brute Force Protection

This firewall configuration document sets up rules to block brute force attacks on SSH (port 22), FTP (port 21), and Telnet (port 23). It creates multiple address lists (stages) and timeouts to track sources and gradually blacklist repeat offenders attempting to login without valid credentials over time.

Uploaded by

ReyRodriguezPalencia
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
  • Firewall Configuration Script

/ ip firewall filter

add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist


action=drop comment="Drop SSH Brute Forcers" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist address-
list-timeout=1d comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 address-
list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new src-address-
list=ssh_stage1 action=add-src-to-address-list address-list=ssh_stage2 address-
list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-
to-address-list address-list=ssh_stage1 address-list-timeout=1m comment=""
disabled=no
/ ip firewall filter
add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist
action=drop comment="Drop FTP Brute Forcers" disabled=no
add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
list=ftp_stage3 action=add-src-to-address-list address-list=ftp_blacklist address-
list-timeout=1d comment="" disabled=no
add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
list=ftp_stage2 action=add-src-to-address-list address-list=ftp_stage3 address-
list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=21 connection-state=new src-address-
list=ftp_stage1 action=add-src-to-address-list address-list=ftp_stage2 address-
list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=21 connection-state=new action=add-src-
to-address-list address-list=ftp_stage1 address-list-timeout=1m comment=""
disabled=no
/ ip firewall filter
add chain=input protocol=tcp dst-port=23 src-address-list=telnet_blacklist
action=drop comment="Drop Telnet Brute Forcers" disabled=no
add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
list=telnet_stage3 action=add-src-to-address-list address-list=telnet_blacklist
address-list-timeout=1d comment="" disabled=no
add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
list=telnet_stage2 action=add-src-to-address-list address-list=telnet_stage3
address-list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=23 connection-state=new src-address-
list=telnet_stage1 action=add-src-to-address-list address-list=telnet_stage2
address-list-timeout=1m comment="" disabled=no
add chain=input protocol=tcp dst-port=23 connection-state=new action=add-src-
to-address-list address-list=telnet_stage1 address-list-timeout=1m comment=""
disabled=no

You might also like