mikrotik / базовая защита микротик из wiki

ссылка

Below you need to change x.x.x.x/x for your technical subnet. This subnet will have full access to the router.

Below we have the bogon list.

Now we have protection against: SynFlood, ICMP Flood, Port Scan, Email Spam and much more. For more information read the comments.