Block WAN IP Address for 24 hours

Options
JohnB1
JohnB1 image  Freshman Member

If an IP attempts to access more than 30 different URLs within 60 seconds, and the majority return 404 or 401, block the IP for 24 hours.

2 votes

Active · Last Updated

Comments

  • Maverick87
    Maverick87 image  Master Member
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    Options

    Mmmm, probably in this situation, one think not work…
    This "rule" check the IP not the MAC Address; I can change the IP and it works again.

  • PeterUK
    PeterUK image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options

    The "Block WAN IP" is unclear? I'm think you want to block from LAN if a client tries 30 different URLs within 60 seconds and return 404 or 401 them block the client LAN IP?

  • Zyxel_Judy
    Zyxel_Judy image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Options

    Hi @JohnB1 ,

    Please clarify the scenario:

    1. Is the 30+ URL accessing within 60 seconds returns 404-401 pattern or block the IP in 24hours coming from a LAN client?
    2. If it's a LAN client, should the block apply to its internet access, intranet access, or both?
    3. What's the use case or scenario behind this request?

    Zyxel_Judy