Cara Drop brute force login user hotspot

Selamat siang agan networkerss kali ini saya akan kasih trick cara ampuh untuk  drop bruce force login hotspot yang mungkin mengganggu kinerja router agan jadi dengan melakukan teknik yang saya jabarkan menurut shifu zoky yang udah baik hati share script di bawah ini 

copas perintah dibawah ini  pada terminal router agan,

/ip firewall filter
add chain=input protocol=tcp dst-address=192.168.3.1 dst-port=64873 src-address-list=hotspot_blacklist action=drop comment="Hotspot bruteforce prevention"
add chain=output action=accept protocol=tcp src-address=192.168.3.1 src-port=64873 content="expired.html" dst-limit=2/1m,3,dst-address/2m
add chain=output action=add-dst-to-address-list protocol=tcp src-address=192.168.3.1 src-port=64873 content="expired.html" address-list=hotspot_blacklist address-list-timeout=5m

/system scheduler
add name="Custom Rule Hospot" on-event=":delay 60s;\r\n/queue simple remove [/queue simple find name=\"hs-\"]\n\r\n/ip firewall filter remove [/ip firewall filter find comment=\"place hotspot rules here\"]\n\r\n/ip firewall nat remove [/ip firewall nat find comment=\"place hotspot rules here\"]\r\n\n/ip hotspot walled-garden remove [/ip hotspot walled-garden find comment=\"place hotspot rules here\"]\r\n/ip firewall filter move [find dst-address=\"192.168.3.1\"] 0\r\n/ip firewall filter move [find src-address=\"192.168.3.1\"] 0\r\n/ip firewall filter move [find src-address=\"192.168.3.1\"] 0\r\n" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon start-time=startup

note :
====
192.168.3.1 = ip gateway hotspot (login page)

jika invalid username diredirect ke expired.html
----------------------------------------------------------
content="expired.html"

jika invalid username tidak di redirect
----------------------------------------------
content="invalid username or password"

sesuaikan address-list-timeout jika ingin di drop lebih lama

tempatkan 3 rule tersebut di paling atas..

Okeeey sekian dari saya yang hanya membantu share teknik drop brufe force login hotspot

Share This