# Protect Connection With ANTI NETCUT - Mikrotik Script RouterOS

    Anti Netcut, Netcut broadcasts ARP and attacks on Layer2, but at least with the script below we are able to answer who is naughty who wants to cut our network.

    /ip firewall address-list add list=netcut address=www.arcai.com
    /ip firewall mangle add action=add-src-to-address-list address-list=NetcutUser address-list-timeout=1h5m chain=prerouting dst-address-list=netcut dst-port=80 protocol=tcp
    /ip firewall filter add action=drop chain=forward comment=NetCut src-address-list=NetcutUser
    /system scheduler add interval=10m name="AutoBlockNetcut"

    # Open System Scheduler and enter this script into "AutoBlockNetcut"

    local a [/ip firewall address-list get [find list="NetcutUser"] address]
    local b [/ip hotspot active get [find address=$a] mac-address]
    if ($a != "") do={[
    /ip hotspot ip-binding add mac-address="$b" address="$a" type=blocked
    /ip firewall address-list remove [find address="$a"]
    /system scheduler add name ($a)  interval="01:00:00" on "/ip hotspot ip-binding remove [find mac-address=$b]
    /system scheduler remove [find name=$a]"
    ]}

    Credit: Unknown