Close Window

Threat Intelligence at Work 24/7 365
MOAB is Mother of all Blacklists

PREREQUISITES for MikroTik Router's

Example of what information we expect to receive from you:

1. Your Name: Sam Stone
2. MikroTik Router's model: CCR2004-1G-12S+2XS
3. Serial Number: 4EF8DA6679A5
4. RouterOS Version: 7.14.2
5. Your primary admin user account name: owner=riverdale
6. File Storage used: [select options only relevant to Your MikroTik Router]
   1. NAND flash memory for file storage: 512MB/128 MB free
   2. CHR virtual memory for file storage: 2GB/1.5 GB free
   3. SSD storage: disk1 256MB/128 MB free
   4. USB memory stick: disk1 8GB/4 GB free
   5. microSD card: disk3 16GB/16 GB free
7. If single WAN port: ether1
   If Multi-WAN in-interface-list name: lbwanip
8. WAN IP address and/or addresses when Failover or Multi-WAN are used.
9. FYI: We track [and log] each account to it's IP address - your embedded account details may only be used on authorized MikroTik Routers that you declare to us - any abuse of privilege of whatsoever nature will cancel your account without further notice.

Once we have your information, and within 24 hours, we will provide you, via e-mail, with your host credentials and scripts. The account info we provide you will be tied to your WAN IP Address. To kick start the process we will also provide you with 2 scripts to download 2 files specific to your MikroTik router model that will be placed in your file storage area: for MikroTik Routers that only have NAND memory the file storage area is called moab which directory is created at the root level; for all other MikroTik Routers the file storage area is called disk2 after which you will also need to import those rsc file using a Terminal session with a 3rd script that's also provided to launch MOAB.

For MikroTik Router models that include interfaces for microSD memory card or USB memory stick or SSD flash chip for external file storage - that external file storage disk must have a minimum of 128 MB of free memory available and must be named disk2 - if your disk is not named disk2 we can show you how-to rename your disk in our web site as shown following.

For Your Information

CAVEATE:A warning or proviso of specific stipulations, conditions, or limitations Do NOT use admin as your primary user account name because that is a security risk. Create a new user account with full rights - give that new user account a distinctive name. Exit out of the default admin account and log into the newly created admin account with that distinctive name. THEN either disable the original admin user account or better still delete that account.

If you would prefer to have us install MOAB for you on your MikroTik Router via chrome remote desktop session let us know and we would be happy to do that for you at an additional cost of US $90.00 assuming that you are using the DEFAULT Firewall rules that MikroTik provides - the process normally takes approximately between 20 to 40 minutes. If your Firewall is not the default or heavily modified the cost to install MOAB will be based on an hourly rate of US $125.00

MOAB has two tracks, one for MikroTik Routers like the hEX, hAP ax ², hAP ax ³, the Audience - tracking between 5K and 16K ipset entries - MikroTik Router models like the CHR, RB3011, RB4011, RB5009, RB1100 and all CCR - tracking between 35K and 60K ipset entries. Once we know which MikroTik Router model you have we will decide if your model qualifies and which track to put you on. Both tracks cover over 600 million IP addresses of known perpetrators.

For MikroTik Routers like the CHR, RB3011, RB4011, RB5009, RB1100 and all CCR models the maximum download file size is 1 MB or less - 3 times daily.

For MikroTik Routers like the hEX, hAP ax ², hAP ax ³, the Audience - the maximum download file size is 0.5 MB or less - 3 times daily.

Performance Hit on throughput: Regardless of which MikroTik Model that qualifies for the MOAB Blacklist Service PERFORMANCE will be excellent. Using MOAB the Bandwidth Performance hit on MikroTik Routers memory constrained models like the hEX is 12% and for the hEX, hAP ax ², hAP ax ³, as well as the Audience its 9% while 3% on amply provisioned MikroTik Routers containing 1 GHz CPU and minimum of 1GB of RAM.

Key POINT to understand about an ipset: ipset is an extension to iptables that allows you to create firewall rules that match entire "sets" of addresses at once. Unlike normal iptables chains, which are stored and traversed linearly, IP sets are stored in indexed data structures, making lookups very efficient, even when dealing with large sets.

IPsets works remarkable well under RouterOS starting with the hEX, hAP ax ², hAP ax ³, Audience and all the other Router models like the CHR, CCRxxxx, RB3011, RB4011, RB1100, RB5009.

How does MOAB store 600+ million IP addresses you wonder? MOAB consists of ipset that store a large number of IP(v4) addresses -- For MikroTik Router models like RB3011, RB4011, RB1100 and all CCR models MOAB normally contains between 35K and 60K ipset entries and in that mix reside 4.4K [+/-] CIDR notations - so you may wonder what do those CIDR notations represent? CIDR notation is a compact representation of an IP address and its associated routing prefix. A CIDR notation entry represents a large collection of IP addresses.
For Example:

This CIDR notation 0.0.0.0/8

contains 16,777,214 IP addresses

This CIDR notation 1.19.0.0/16

contains 65,534 IP addresses

This CIDR notation 1.32.128.0/18

contains 6,382 IP addresses

 

A 10 day FREE Trial Period is available for MOAB First Time User's who want to trial MOAB prior to purchasing a subscription. At the end of the MOAB Free Trail Period - on the 10th day - if you wish to continue with MOAB you must make the Subscription Payment via PayPal otherwise your Trial Account will be deleted end of that day.