Prevent RDP logon brute force in mikrotik router via winbox
- by holian
Masters,
I need help, how to config our router to block RDP brute force attacks
I would like to set our router to only allow RDP connection from a specified country (our specified IP ranges), plus i need to set up router to block (take ips to black list) and drop brute force attepmst to specified port numbers.
I try to set this with changeing the ftp port to rdp port.
http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention_%28FTP_%26_SSH
Any suggestion tnx.
H
Current configuration:
I try to configure the router via Winbox.
I set some NAT rules (from dyndns to local address, rdp port)
In the filter rules tab:
I'm not sure this configuration should do the trick?! Is the content text "530 login incorrect" is fit for RDP connection to? Because in the tutorial used for filtering FTP connection.
How to set router to allow RDP attempts from specified IP ranges?
Thank you
// New config
