Neco takoveho?
/ip firewall filter
add action=jump chain=input connection-state=new disabled=no jump-target=block-ddos
add action=drop chain=input connection-state=new disabled=no dst-address-list=SEC_ddosed src-address-list=SEC_ddoser
add action=return chain=block-ddos disabled=no dst-limit=50,50,src-and-dst-addresses/10s
add action=add-dst-to-address-list address-list=SEC_ddosed address-list-timeout=10m chain=block-ddos disabled=no
add action=add-src-to-address-list address-list=SEC_ddoser address-list-timeout=10m chain=block-ddos disabled=no
