Monday, 28 August 2017

Mikrotik:ICMP security and ICMP Flooding .

Configure this below rules to minimise the ICMP request to your devices .




/ip firewall filter
add chain=icmp protocol=icmp icmp-options=0:0 action=accept \ comment="echo reply"
add chain=icmp protocol=icmp icmp-options=3:0 action=accept \ comment="net unreachable"
add chain=icmp protocol=icmp icmp-options=3:1 action=accept \ comment="host unreachable"
add chain=icmp protocol=icmp icmp-options=4:0 action=accept \ comment="allow source quench"
add chain=icmp protocol=icmp icmp-options=8:0 action=accept \ comment="allow echo request"
add chain=icmp protocol=icmp icmp-options=11:0 action=accept \ comment="allow time exceed"
add chain=icmp protocol=icmp icmp-options=12:0 action=accept \ comment="allow parameter bad"
add chain=icmp action=drop comment="deny all other types"

2 comments:

  1. Abaddon's Pro titanium flat iron flat iron pole - TITNALART
    The best 2016 ford focus titanium of หาเงินออนไลน์ all, Abaddon's Pro titanium titanium astroneer flat iron pole is a flat iron pole located under the bar, powerbook g4 titanium in the centre of the castle in the titanium jewelry piercing castle at Titha.

    ReplyDelete