search

pwlgrzs / Mikrotik-Blacklist

Mikrotik friendly blacklist to filter all these damn hackers.
160 stars 32 forks source link

Improvement Advice #18

Open uniquoo opened 9 months ago

uniquoo commented 9 months ago

I've came across your IP-Blacklist script because i'm writing one myself at the moment. I've got one small advice for you to improve performance of blacklist handling:

Add the firewall-rule into /ip firewall raw instead. This drops the packets before they hit the routing and so is more efficient.

Hope i could be of help :-)

prghix commented 6 months ago

@uniquoo can you be more specific please? An example would be helpful.

Thanks! :)

trantienthanh commented 1 month ago

@uniquoo can you be more specific please? An example would be helpful.

Thanks! :)

He meant:

/ip firewall raw print ;;; dropping blacklisted IP chain=prerouting action=drop in-interface-list=LIST-WAN log=no log-prefix="" src-address-list=pwlgrzs-blacklist