[Mikrotik] DOS attack question
josh at imaginenetworksllc.com
Tue Dec 4 10:44:00 CST 2012
Address lists are easier to manage.
I don't believe it has any noticeable effect how you enter them, though.
1100 Wayne St
Troy, OH 45373
On Tue, Dec 4, 2012 at 11:35 AM, David Hulsebus <contact at portative.net>wrote:
> We've had someone sending network attacks on us over the last few days. We
> are blocking 15K + IP addresses each 24 hours and and have an address list
> that has grown to more than 45K since Sunday morning. I do see my CPU usage
> hasn't really grown beyond 10% - it usually runs 6-8%. Which brings me to
> the question. At that scale are address list look-ups more efficient than
> multiple rules? Or is there a difference ? I am looking at increasing the
> blocked time from 3 days to 14.
> Thank you, Dave
> David Hulsebus
> Portative Technologies, LLC
> 1995 Allison Lane, Suite 100
> Corydon, IN 47112
> Mikrotik mailing list
> Mikrotik at mail.butchevans.com
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Mikrotik