ROS 2.927网吧防火墙脚本

作者:zqcheng    发布于7年前 (2011-08-17)    阅读:  264  次

直接复制粘贴应该会把各位

/ ip firewall filter
add chain=virus protocol=tcp dst-port=593 action=drop comment="" disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment="" disabled=no
add chain=virus protocol=tcp dst-port=1363-1364 action=drop
comment="ndm.requester" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen.cast"
disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx"
disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichlid"
disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop
comment="Backdoor.OptixPro" disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=""
disabled=no
add chain=virus protocol=udp dst-port=8787 action=drop
comment="Back.Orifice.2000.Trojan-6" disabled=no
add chain=virus protocol=udp dst-port=8879 action=drop
comment="Back.Orifice.2000.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=31666 action=drop
comment="Back.Orifice.2000.Trojan-8" disabled=no
add chain=virus protocol=udp dst-port=31337-31338 action=drop
comment="Back.Orifice.2000.Trojan-9" disabled=no
add chain=virus protocol=udp dst-port=54320-54321 action=drop
comment="Back.Orifice.2000.Trojan-10" disabled=no
add chain=virus protocol=udp dst-port=12345-12346 action=drop
comment="Block.NetBus.Trojan-3" disabled=no
add chain=virus protocol=udp dst-port=20034 action=drop
comment="Block.NetBus.Trojan-4" disabled=no
add chain=virus protocol=udp dst-port=21554 action=drop
comment="GirlFriend.Trojan-2" disabled=no
add chain=virus protocol=udp dst-port=41 action=drop
comment="DeepThroat.Trojan-8" disabled=no
add chain=virus protocol=udp dst-port=3150 action=drop
comment="DeepThroat.Trojan-9" disabled=no
add chain=virus protocol=udp dst-port=999 action=drop
comment="DeepThroat.Trojan-10" disabled=no
add chain=virus protocol=udp dst-port=6670 action=drop
comment="DeepThroat.Trojan-11" disabled=no
add chain=virus protocol=udp dst-port=6771 action=drop
comment="DeepThroat.Trojan-12" disabled=no
add chain=virus protocol=udp dst-port=60000 action=drop
comment="DeepThroat.Trojan-13" disabled=no
add chain=virus protocol=udp dst-port=10067 action=drop
comment="Portal.of.Doom.Trojan-5" disabled=no
add chain=virus protocol=udp dst-port=10167 action=drop
comment="Portal.of.Doom.Trojan-6" disabled=no
add chain=virus protocol=udp dst-port=3700 action=drop
comment="Portal.of.Doom.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=9872-9875 action=drop
comment="Portal.of.Doom.Trojan-8" disabled=no
add chain=virus protocol=udp dst-port=6883 action=drop
comment="Delta.Source.Trojan-5" disabled=no
add chain=virus protocol=udp dst-port=26274 action=drop
comment="Delta.Source.Trojan-6" disabled=no
add chain=virus protocol=udp dst-port=44444 action=drop
comment="Delta.Source.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=47262 action=drop
comment="Delta.Source.Trojan-8" disabled=no
add chain=virus protocol=udp dst-port=3791 action=drop
comment="Eclypse.Trojan-1" disabled=no
add chain=virus protocol=udp dst-port=3801 action=drop
comment="Eclypse.Trojan-2" disabled=no
add chain=virus protocol=udp dst-port=5880-5882 action=drop
comment="Eclypse.Trojan-3" disabled=no
add chain=virus protocol=udp dst-port=5888-5889 action=drop
comment="Eclypse.Trojan-4" disabled=no
add chain=virus protocol=udp dst-port=34555 action=drop
comment="Trin00.DDoS.Trojan-1" disabled=no
add chain=virus protocol=udp dst-port=35555 action=drop
comment="Trin00.DDoS.Trojan-2" disabled=no
add chain=virus protocol=udp dst-port=31338 action=drop
comment="NetSpy.DK.Trojan-1" disabled=no

add chain=input connection-state=invalid action=drop
comment="丢弃非法连接packets" disabled=no
add chain=input protocol=tcp dst-port=80 connection-limit=30,0 action=drop
comment="限制总http连接数为30" disabled=no
add chain=input protocol=tcp psd=21,3s,3,1 action=drop
comment="探测并丢弃端口扫描连接" disabled=no
add chain=input protocol=tcp connection-limit=3,32 src-address-list=black_list
action=tarpit comment="压制DoS攻击" disabled=no
add chain=input protocol=tcp connection-limit=10,32
action=add-src-to-address-list address-list=black_list
address-list-timeout=1d comment="探测DoS攻击" disabled=no
add chain=input dst-address-type=!local action=drop comment="丢弃掉非本地数据"
disabled=no
add chain=input src-address-type=!unicast action=drop
comment="丢弃掉所有非单播数据" disabled=no
add chain=input protocol=icmp action=jump jump-target=ICMP
comment="跳转到ICMP链表" disabled=no
add chain=input protocol=tcp action=jump jump-target=virus
comment="跳转到病毒链表" disabled=no
add chain=ICMP protocol=icmp icmp-options=0:0-255 limit=5,5 action=accept
comment="Ping应答限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:3 limit=5,5 action=accept
comment="Traceroute限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:4 limit=5,5 action=accept
comment="MTU线路探测限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=8:0-255 limit=5,5 action=accept
comment="Ping请求限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=11:0-255 limit=5,5 action=accept
comment="Trace TTL限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp action=drop comment="丢弃掉任何ICMP数据"
disabled=no
add chain=forward connection-state=established action=accept
comment="接受以连接的数据包" disabled=no
add chain=forward connection-state=related action=accept
comment="接受相关数据包" disabled=no
add chain=forward connection-state=invalid action=drop
comment="丢弃非法数据包" disabled=no
add chain=forward protocol=tcp connection-limit=50,32 action=drop
comment="限制每个主机TCP连接数为50条" disabled=no
add chain=forward src-address-type=!unicast action=drop
comment="丢弃掉所有非单播数据" disabled=no
add chain=forward protocol=icmp action=jump jump-target=ICMP
comment="跳转到ICMP链表" disabled=no
add chain=forward action=jump jump-target=virus comment="跳转到病毒链表"
disabled=no
add chain=virus protocol=tcp dst-port=41 action=drop
comment="DeepThroat.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=82 action=drop
comment="W32.Korgo.Ah" disabled=no
add chain=virus protocol=tcp dst-port=113 action=drop
comment="W32.Korgo.A/B/C/D/E/F-1" disabled=no
add chain=virus protocol=tcp dst-port=2041 action=drop
comment="W33.Korgo.A/B/C/D/E/F-2" disabled=no
add chain=virus protocol=tcp dst-port=3150 action=drop
comment="DeepThroat.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3067 action=drop
comment="W32.Korgo.A/B/C/D/E/F-3" disabled=no
add chain=virus protocol=tcp dst-port=3422 action=drop
comment="Backdoor.IRC.Aladdinz.R-1" disabled=no
add chain=virus protocol=tcp dst-port=6667 action=drop
comment="W32.Korgo.A/B/C/D/E/F-4" disabled=no
add chain=virus protocol=tcp dst-port=6789 action=drop
comment="1111111" disabled=no
add chain=virus protocol=tcp dst-port=8787 action=drop
comment="Back.Orifice.2000.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=8879 action=drop
comment="Back.Orifice.2000.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=8967 action=drop
comment="W32.Dabber.A/B-2" disabled=no
add chain=virus protocol=tcp dst-port=9999 action=drop
comment="W32.Dabber.A/B-3" disabled=no
add chain=virus protocol=tcp dst-port=20034 action=drop
comment="Block.NetBus.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=21554 action=drop
comment="GirlFriend.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=31666 action=drop
comment="Back.Orifice.2000.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=43958 action=drop
comment="Backdoor.IRC.Aladdinz.R-2" disabled=no
add chain=virus protocol=tcp dst-port=999 action=drop
comment="DeepThroat.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6670 action=drop
comment="DeepThroat.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6771 action=drop
comment="DeepThroat.Trojan-5" disabled=no
add chain=virus protocol=tcp dst-port=60000 action=drop
comment="DeepThroat.Trojan-6" disabled=no
add chain=virus protocol=tcp dst-port=2140 action=drop
comment="DeepThroat.Trojan-7" disabled=no
add chain=virus protocol=tcp dst-port=10067 action=drop
comment="Portal.of.Doom.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=10167 action=drop
comment="Portal.of.Doom.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3700 action=drop
comment="Portal.of.Doom.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=9872-9875 action=drop
comment="Portal.of.Doom.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6883 action=drop
comment="Delta.Source.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=26274 action=drop
comment="Delta.Source.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop
comment="Delta.Source.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=47262 action=drop
comment="Delta.Source.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=3791 action=drop
comment="Eclypse.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3801 action=drop
comment="Eclypse.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65390 action=drop
comment="Eclypse.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5880-5882 action=drop
comment="Y3K.RAT.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5888-5889 action=drop
comment="Y3K.RAT.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=30100-30103 action=drop
comment="NetSphere.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=30133 action=drop
comment="NetSphere.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7300-7301 action=drop
comment="NetMonitor.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7306-7308 action=drop
comment="NetMonitor.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=79 action=drop
comment="FireHotcker.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5031 action=drop
comment="FireHotcker.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5321 action=drop
comment="FireHotcker.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6400 action=drop
comment="TheThing.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7777 action=drop
comment="TheThing.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1047 action=drop
comment="GateCrasher.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=6969-6970 action=drop
comment="GateCrasher.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2774 action=drop comment="SubSeven-1"
disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="SubSeven-2"
disabled=no
add chain=virus protocol=tcp dst-port=1243 action=drop comment="SubSeven-3"
disabled=no
add chain=virus protocol=tcp dst-port=1234 action=drop comment="SubSeven-4"
disabled=no
add chain=virus protocol=tcp dst-port=6711-6713 action=drop
comment="SubSeven-5" disabled=no
add chain=virus protocol=tcp dst-port=16959 action=drop comment="SubSeven-7"
disabled=no
add chain=virus protocol=tcp dst-port=25685-25686 action=drop
comment="Moonpie.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=25982 action=drop
comment="Moonpie.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=31337-31339 action=drop
comment="NetSpy.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=8102 action=drop comment="Trojan"
disabled=no
add chain=virus protocol=tcp dst-port=8011 action=drop comment="WAY.Trojan"
disabled=no
add chain=virus protocol=tcp dst-port=7626 action=drop comment="Trojan.BingHe"
disabled=no
add chain=virus protocol=tcp dst-port=19191 action=drop
comment="Trojan.NianSeHoYian" disabled=no
add chain=virus protocol=tcp dst-port=23444-23445 action=drop
comment="NetBull.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=2583 action=drop
comment="WinCrash.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3024 action=drop
comment="WinCrash.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4092 action=drop
comment="WinCrash.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5714 action=drop
comment="WinCrash.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=1010-1012 action=drop
comment="Doly1.0/1.35/1.5trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1015 action=drop
comment="Doly1.0/1.35/1.5trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2004-2005 action=drop
comment="TransScout.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=9878 action=drop
comment="TransScout.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2773 action=drop
comment="Backdoor.YAI..Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7215 action=drop
comment="Backdoor.YAI.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=54283 action=drop
comment="Backdoor.YAI.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=1003 action=drop
comment="BackDoorTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5598 action=drop
comment="BackDoorTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5698 action=drop
comment="BackDoorTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=31554 action=drop
comment="SchainwindlerTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=18753 action=drop
comment="Shaft.DDoS.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=20432 action=drop
comment="Shaft.DDoS.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65000 action=drop
comment="Devil.DDoS.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=11831 action=drop
comment="LatinusTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=29559 action=drop
comment="LatinusTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1784 action=drop
comment="Snid.X2Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3586 action=drop
comment="Snid.X2Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7609 action=drop
comment="Snid.X2Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=12348-12349 action=drop
comment="BionetTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=12478 action=drop
comment="BionetTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=57922 action=drop
comment="BionetTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop
comment="Worm.Novarg.a.Mydoom.a1." disabled=no
add chain=virus protocol=tcp dst-port=6777 action=drop
comment="Worm.BBeagle.a.Bagle.a." disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop
comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop
comment="Worm.BBeagle.c-g/j-l" disabled=no
add chain=virus protocol=tcp dst-port=2556 action=drop
comment="Worm.BBeagle.p/q/r/n" disabled=no
add chain=virus protocol=tcp dst-port=20742 action=drop
comment="Worm.BBEagle.m-2" disabled=no
add chain=virus protocol=tcp dst-port=4751 action=drop
comment="Worm.BBeagle.s/t/u/v" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop
comment="Worm.BBeagle.aa/ab/w/x-z-2" disabled=no
add chain=virus protocol=tcp dst-port=5238 action=drop
comment="Worm.LovGate.r.RpcExploit" disabled=no
add chain=virus protocol=tcp dst-port=1068 action=drop comment="Worm.Sasser.a"
disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9996 action=drop
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9995 action=drop comment="Worm.Sasser.d"
disabled=no
add chain=virus protocol=tcp dst-port=10168 action=drop
comment="Worm.Lovgate.a/b/c/d" disabled=no
add chain=virus protocol=tcp dst-port=20808 action=drop
comment="Worm.Lovgate.v.QQ" disabled=no
add chain=virus protocol=tcp dst-port=1092 action=drop
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=20168 action=drop
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=1363-1364 action=drop
comment="ndm.requester" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen.cast"
disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx"
disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichainlid"
disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop
comment="Backdoor.Optixprotocol" disabled=no
add chain=virus protocol=tcp dst-port=8888 action=drop
comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=udp dst-port=44444 action=drop
comment="Delta.Source.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=8998 action=drop
comment="Worm.Sobig.f-3" disabled=no

add chain=virus protocol=tcp dst-port=3198 action=drop
comment="Worm.Novarg.a.Mydoom.a2." disabled=no
add chain=virus protocol=tcp dst-port=139 action=drop comment="Drop Blaster
Worm" disabled=no
add chain=virus protocol=tcp dst-port=135 action=drop comment="Drop Blaster
Worm" disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster
Worm" disabled=no

# nov/21/2006 07:36:25 by RouterOS 2.9.27
# software id = 6EHT-IYT
#
/ ip firewall mangle
add chain=postrouting src-address=192.168.1.1/24 protocol=tcp tcp-flags=syn
action=change-mss new-mss=1400 comment="" disabled=no
add chain=prerouting src-address=192.168.1.1/24 action=accept comment=""
disabled=no
add chain=forward p2p=all-p2p action=mark-connection
new-connection-mark=p2p_conn passthrough=yes comment="" disabled=yes
add chain=forward connection-mark=p2p_conn action=mark-packet
new-packet-mark=p2p passthrough=yes comment="" disabled=yes
add chain=forward connection-mark=!p2p_conn action=mark-packet
new-packet-mark=general passthrough=yes comment="" disabled=yes
add chain=forward packet-size=32-512 action=mark-packet new-packet-mark=small
passthrough=yes comment="" disabled=yes
add chain=forward packet-size=512-1200 action=mark-packet new-packet-mark=big
passthrough=yes comment="" disabled=yes
/ ip firewall nat
add chain=srcnat src-address=192.168.1.1/24 action=masquerade comment=""
disabled=no
/ ip firewall connection tracking
set enabled=yes tcp-syn-sent-timeout=5s tcp-syn-received-timeout=5s
tcp-established-timeout=5d tcp-fin-wait-timeout=2m
tcp-close-wait-timeout=1m tcp-last-ack-timeout=30s
tcp-time-wait-timeout=2m tcp-close-timeout=10s udp-timeout=30s
udp-stream-timeout=3m icmp-timeout=10s generic-timeout=10m
tcp-syncookie=yes
/ ip firewall filter
add chain=input src-address-list=black_list action=drop comment="DROP
BlackList IP" disabled=no
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment="Port
scanners to list " disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="NMAP FIN Stealth scan" disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment="SYN/FIN
scan" disabled=no
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment="SYN/RST
scan" disabled=no
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="FIN/PSH/URG scan" disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="ALL/ALL scan" disabled=no
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="NMAP NULL scan" disabled=no
add chain=input protocol=tcp connection-limit=3,32 src-address-list=black_list
action=tarpit comment="suppress DoS attack" disabled=no
add chain=input protocol=tcp connection-limit=10,32
action=add-src-to-address-list address-list=black_list
address-list-timeout=1d comment="detect DoS attack" disabled=no
add chain=input src-address-list="port scanners" action=drop comment="dropping
port scanners" disabled=no
add chain=input dst-address-type=!local action=drop comment="drop all that is
not to local" disabled=no
add chain=input protocol=icmp action=jump jump-target=ICMP comment="jump to
chain ICMP" disabled=no
add chain=input action=jump jump-target=services comment="Jump to service"
disabled=no
add chain=input action=jump jump-target=virus comment="jump to Virus"
disabled=no
add chain=ICMP protocol=icmp icmp-options=0:0-255 limit=5,5 action=accept
comment="0:0 and limit for 5pac/s" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:3 limit=5,5 action=accept
comment="3:3 and limit for 5pac/s" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:4 limit=5,5 action=accept
comment="3:4 and limit for 5pac/s" disabled=no
add chain=ICMP protocol=icmp icmp-options=8:0-255 limit=5,5 action=accept
comment="8:0 and limit for 5pac/s" disabled=no
add chain=ICMP protocol=icmp icmp-options=11:0-255 limit=5,5 action=accept
comment="11:0 and limit for 5pac/s" disabled=no
add chain=services protocol=tcp dst-port=8291 action=accept comment="Allow
winbox" disabled=no
add chain=services protocol=tcp dst-port=20-21 action=accept comment="allow
ftp" disabled=yes
add chain=services protocol=tcp dst-port=8080 action=accept comment="allow Web
Proxy" disabled=yes
add chain=services src-address=127.0.0.1 dst-address=127.0.0.1 action=accept
comment="accept localhost" disabled=no
add chain=services protocol=tcp dst-port=22 action=accept comment="allow sftp,
ssh" disabled=yes
add chain=services protocol=tcp dst-port=23 action=accept comment="allow
telnet" disabled=yes
add chain=services protocol=tcp dst-port=80 action=accept comment="allow http,
webbox" disabled=yes
add chain=services protocol=udp dst-port=20561 action=accept comment="allow
MACwinbox " disabled=yes
add chain=services protocol=tcp dst-port=2000 action=accept comment="Bandwidth
server" disabled=no
add chain=services protocol=udp dst-port=5678 action=accept comment=" MT
Discovery Protocol" disabled=no
add chain=services protocol=tcp dst-port=53 action=accept comment="allow DNS
request" disabled=yes
add chain=services protocol=udp dst-port=53 action=accept comment="Allow DNS
request" disabled=yes
add chain=services protocol=udp dst-port=1701 action=accept comment="allow
L2TP" disabled=no
add chain=services protocol=tcp dst-port=1723 action=accept comment="allow
PPTP" disabled=no
add chain=services protocol=gre action=accept comment="allow PPTP and EoIP"
disabled=no
add chain=services protocol=ipencap action=accept comment="allow IPIP"
disabled=no
add chain=services protocol=udp dst-port=1900 action=accept comment="UPnP"
disabled=no
add chain=services protocol=tcp dst-port=2828 action=accept comment="UPnP"
disabled=no
add chain=services protocol=udp dst-port=67-68 action=accept comment="allow
DHCP" disabled=no
add chain=services protocol=tcp dst-port=123 action=accept comment="allow NTP"
disabled=no
add chain=services protocol=tcp dst-port=161 action=accept comment="allow
SNMP" disabled=no
add chain=services protocol=tcp dst-port=443 action=accept comment="allow
https for Hotspot" disabled=no
add chain=services protocol=tcp dst-port=1080 action=accept comment="allow
Socks for Hotspot" disabled=no
add chain=services protocol=udp dst-port=500 action=accept comment="allow
IPSec connections" disabled=no
add chain=services protocol=ipsec-esp action=accept comment="allow IPSec"
disabled=no
add chain=services protocol=ipsec-ah action=accept comment="allow IPSec"
disabled=no
add chain=services protocol=tcp dst-port=179 action=accept comment="Allow BGP"
disabled=no
add chain=services protocol=udp dst-port=520-521 action=accept comment="allow
RIP" disabled=no
add chain=services protocol=ospf action=accept comment="allow OSPF"
disabled=no
add chain=services protocol=udp dst-port=5000-5100 action=accept
comment="allow BGP" disabled=no
add chain=services protocol=tcp dst-port=1720 action=accept comment="allow
Telephony" disabled=no
add chain=services protocol=udp dst-port=1719 action=accept comment="allow
Telephony" disabled=no
add chain=services protocol=vrrp action=accept comment="allow VRRP "
disabled=no
add chain=forward connection-state=invalid action=drop comment="drop invalid
packets" disabled=no
add chain=forward p2p=all-p2p action=drop comment="Drop BT and All P2P"
disabled=yes
add chain=output connection-state=invalid action=drop comment="drop invalid
packets" disabled=no
add chain=output connection-state=related action=accept comment="accept
related packets" disabled=no
add chain=output connection-state=established action=accept comment="accept
established packets" disabled=no
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=""
disabled=no
add chain=virus protocol=tcp dst-port=82 action=drop
comment="Worm.NetSky.Y@mm" disabled=yes
add chain=virus protocol=tcp dst-port=113 action=drop
comment="W32.Korgo.A/B/C/D/E/F-1" disabled=no
add chain=virus protocol=tcp dst-port=2041 action=drop
comment="W33.Korgo.A/B/C/D/E/F-2" disabled=no
add chain=virus protocol=tcp dst-port=3067 action=drop
comment="W32.Korgo.A/B/C/D/E/F-3" disabled=no
add chain=virus protocol=tcp dst-port=6667 action=drop
comment="W32.Korgo.A/B/C/D/E/F-4" disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop
comment="W32.Korgo.A/B/C/D/E/F-5" disabled=no
add chain=virus protocol=tcp dst-port=1000-1001 action=drop
comment="Backdoor.Nibu.B-1" disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop
comment="Backdoor.Nibu.B-2" disabled=no
add chain=virus protocol=tcp dst-port=10000 action=drop
comment="Backdoor.Nibu.E/G/H" disabled=no
add chain=virus protocol=tcp dst-port=3422 action=drop
comment="Backdoor.IRC.Aladinz.R-1" disabled=no
add chain=virus protocol=tcp dst-port=43958 action=drop
comment="Backdoor.IRC.Aladinz.R-2" disabled=no
add chain=virus protocol=tcp dst-port=8967 action=drop
comment="W32.Dabber.A/B-2" disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop
comment="W32.Dabber.A/B-1" disabled=no
add chain=virus protocol=tcp dst-port=6789 action=drop
comment="Worm.NetSky.S/T/U@mm" disabled=no
add chain=virus protocol=tcp dst-port=8787 action=drop
comment="Back.Orifice.2000.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=8879 action=drop
comment="Back.Orifice.2000.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=31666 action=drop
comment="Back.Orifice.2000.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=31337-31338 action=drop
comment="Back.Orifice.2000.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=54320-54321 action=drop
comment="Back.Orifice.2000.Trojan-5" disabled=no
add chain=virus protocol=tcp dst-port=12345-12346 action=drop
comment="Block.NetBus.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=20034 action=drop
comment="Block.NetBus.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=21554 action=drop
comment="GirlFriend.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=41 action=drop
comment="DeepThroat.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3150 action=drop
comment="DeepThroat.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=999 action=drop
comment="DeepThroat.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6670 action=drop
comment="DeepThroat.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6771 action=drop
comment="DeepThroat.Trojan-5" disabled=no
add chain=virus protocol=tcp dst-port=60000 action=drop
comment="DeepThroat.Trojan-6" disabled=no
add chain=virus protocol=tcp dst-port=2140 action=drop
comment="DeepThroat.Trojan-7" disabled=no
add chain=virus protocol=tcp dst-port=10067 action=drop
comment="Portal.of.Doom.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=10167 action=drop
comment="Portal.of.Doom.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3700 action=drop
comment="Portal.of.Doom.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=9872-9875 action=drop
comment="Portal.of.Doom.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6883 action=drop
comment="Delta.Source.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=26274 action=drop
comment="Delta.Source.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop
comment="Delta.Source.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=47262 action=drop
comment="Delta.Source.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=3791 action=drop
comment="Eclypse.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3801 action=drop
comment="Eclypse.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65390 action=drop
comment="Eclypse.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5880-5882 action=drop
comment="Y3K.RAT.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5888-5889 action=drop
comment="Y3K.RAT.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=30100-30103 action=drop
comment="NetSphere.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=30133 action=drop
comment="NetSphere.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7300-7301 action=drop
comment="NetMonitor.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7306-7308 action=drop
comment="NetMonitor.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=79 action=drop
comment="FireHotcker.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5031 action=drop
comment="FireHotcker.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5321 action=drop
comment="FireHotcker.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6400 action=drop
comment="TheThing.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1047 action=drop
comment="GateCrasher.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=6969-6970 action=drop
comment="GateCrasher.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2774 action=drop comment="SubSeven-1"
disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="SubSeven-2"
disabled=no
add chain=virus protocol=tcp dst-port=1243 action=drop comment="SubSeven-3"
disabled=no
add chain=virus protocol=tcp dst-port=1234 action=drop comment="SubSeven-4"
disabled=no
add chain=virus protocol=tcp dst-port=6711-6713 action=drop
comment="SubSeven-5" disabled=no
add chain=virus protocol=tcp dst-port=16959 action=drop comment="SubSeven-7"
disabled=no
add chain=virus protocol=tcp dst-port=25685-25686 action=drop
comment="Moonpie.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=25982 action=drop
comment="Moonpie.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop
comment="NetSpy.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1033 action=drop
comment="NetSpy.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=31337-31339 action=drop
comment="NetSpy.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=8102 action=drop comment="Trojan"
disabled=no
add chain=virus protocol=tcp dst-port=7306 action=drop
comment="Netspy3.0Trojan" disabled=no
add chain=virus protocol=tcp dst-port=8011 action=drop comment="WAY.Trojan"
disabled=no
add chain=virus protocol=tcp dst-port=7626 action=drop comment="Trojan.BingHe"
disabled=no
add chain=virus protocol=tcp dst-port=19191 action=drop
comment="Trojan.NianSeHoYian" disabled=no
add chain=virus protocol=tcp dst-port=23444-23445 action=drop
comment="NetBull.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=2583 action=drop
comment="WinCrash.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3024 action=drop
comment="WinCrash.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4092 action=drop
comment="WinCrash.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5714 action=drop
comment="WinCrash.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=1010-1012 action=drop
comment="Doly1.0/1.35/1.5trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1015 action=drop
comment="Doly1.0/1.35/1.5trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1999 action=drop
comment="TransScout.Trojan-1 " disabled=no
add chain=virus protocol=tcp dst-port=9878 action=drop
comment="TransScout.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2773 action=drop
comment="Backdoor.YAI..Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7215 action=drop
comment="Backdoor.YAI.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=54283 action=drop
comment="Backdoor.YAI.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=1003 action=drop
comment="BackDoorTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5598 action=drop
comment="BackDoorTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5698 action=drop
comment="BackDoorTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=2716 action=drop
comment="PrayerTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=21544 action=drop
comment="SchwindlerTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=31554 action=drop
comment="SchwindlerTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=18753 action=drop
comment="Shaft.DDoS.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=20432 action=drop
comment="Shaft.DDoS.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65000 action=drop
comment="Devil.DDoS.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=11831 action=drop
comment="LatinusTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=29559 action=drop
comment="LatinusTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1784 action=drop
comment="Snid.X2Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3586 action=drop
comment="Snid.X2Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7609 action=drop
comment="Snid.X2Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=12348-12349 action=drop
comment="BionetTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=57922 action=drop
comment="BionetTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=3127-3198 action=drop
comment="Worm.Novarg.a.Mydoom.a.-1" disabled=no
add chain=virus protocol=tcp dst-port=6777 action=drop
comment="Worm.BBeagle.a.Bagle.a." disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop
comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop
comment="Worm.BBeagle.c-g/j-l" disabled=no
add chain=virus protocol=tcp dst-port=2556 action=drop
comment="Worm.BBeagle.p/q/r/n" disabled=no
add chain=virus protocol=tcp dst-port=20742 action=drop
comment="Worm.BBEagle.m-2" disabled=no
add chain=virus protocol=tcp dst-port=4751 action=drop
comment="Worm.BBeagle.s/t/u/v" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop
comment="Worm.BBeagle.aa/ab/w/x-z-2" disabled=no
add chain=virus protocol=tcp dst-port=5238 action=drop
comment="Worm.LovGate.r.RpcExploit" disabled=no
add chain=virus protocol=tcp dst-port=1068 action=drop comment="Worm.Sasser.a"
disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9996 action=drop
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9995 action=drop comment="Worm.Sasser.d"
disabled=no
add chain=virus protocol=tcp dst-port=10168 action=drop
comment="Worm.Lovgate.a/b/c/d" disabled=no
add chain=virus protocol=tcp dst-port=20808 action=drop
comment="Worm.Lovgate.v.QQ" disabled=no
add chain=virus protocol=tcp dst-port=1092 action=drop
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=20168 action=drop
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=udp dst-port=123 action=drop comment="Worm.Sobig.f-1"
disabled=no
add chain=virus protocol=udp dst-port=995-998 action=drop
comment="Worm.Sobig.f-2" disabled=no
add chain=forward dst-address=62.241.53.15 action=drop comment="Drop Emule"
disabled=no
add chain=forward dst-address=218.16.125.227 action=drop comment="DROP
Coolgool" disabled=no
add chain=forward dst-address=61.143.210.56 action=drop comment="" disabled=no
add chain=forward dst-address=218.16.125.226 action=drop comment=""
disabled=no
add chain=forward dst-address=61.129.115.206 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=16881 action=drop comment="DROP
Bitspirt" disabled=no
add chain=forward protocol=udp dst-port=16881 action=drop comment=""
disabled=no
add chain=forward dst-address=58.17.4.31 action=drop comment="Baishitong Tool"
disabled=no
add chain=forward dst-address=202.108.156.206 action=drop comment="drop baidu
MP3" disabled=no
add chain=forward protocol=tcp dst-port=50007 action=drop comment="PTC"
disabled=no
add chain=forward dst-address=62.241.53.15 protocol=tcp action=drop
comment="eDonkey2000" disabled=no
add chain=forward dst-address=62.241.53.15 protocol=udp action=drop comment=""
disabled=no
add chain=forward dst-address=62.241.53.17 protocol=tcp action=drop comment=""
disabled=no
add chain=forward dst-address=62.241.53.17 protocol=udp action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.118.224 action=drop
comment="Poco2005nn" disabled=no
add chain=forward dst-address=210.192.122.147 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.116.233 action=drop comment=""
disabled=no
add chain=forward dst-address=221.192.132.184 action=drop comment="Drop
(NetFairy 2004)" disabled=no
add chain=forward dst-address=61.233.75.13 action=drop comment="" disabled=no
add chain=forward dst-address=61.138.213.251 action=drop comment=""
disabled=no
add chain=forward dst-address=222.240.210.68 action=drop comment=""
disabled=no
add chain=forward dst-address=61.172.197.196 action=drop comment="Drop : 6346"
disabled=no
add chain=forward dst-address=218.1.14.3 action=drop comment="" disabled=no
add chain=forward dst-address=218.1.14.4 action=drop comment="" disabled=no
add chain=forward dst-address=218.1.14.9 action=drop comment="" disabled=no
add chain=forward dst-address=61.172.197.209 action=drop comment=""
disabled=no
add chain=forward dst-address=61.172.197.197 action=drop comment=""
disabled=no
add chain=forward dst-address=218.1.14.5 action=drop comment="" disabled=no
add chain=forward dst-address=218.5.72.118 action=drop comment="" disabled=no
add chain=forward dst-address=61.172.197.196 action=drop comment=""
disabled=no
add chain=forward dst-address=211.155.224.67 action=drop comment="Drop "
disabled=no
add chain=forward dst-address=211.91.135.114 action=drop comment="Drop
RealLink" disabled=no
add chain=forward dst-address=221.233.18.180 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.119.55 action=drop comment="" disabled=no
add chain=forward dst-address=221.3.132.99 action=drop comment="" disabled=no
add chain=forward dst-address=219.136.251.56 action=drop comment="Drop "
disabled=no
add chain=forward dst-address=61.149.124.173 action=drop comment=""
disabled=no
add chain=forward dst-address=221.229.241.243 action=drop comment="DROP : 5093
" disabled=no
add chain=forward dst-address=202.96.137.56 action=drop comment="DROP "
disabled=no
add chain=forward dst-address=218.244.45.67 action=drop comment="DROP :6801
6800 7003nn" disabled=no
add chain=forward dst-address=220.169.192.145 action=drop comment=""
disabled=no
add chain=forward dst-address=221.233.19.30 action=drop comment="DROP P2P :
9000nn" disabled=no
add chain=forward dst-address=66.197.13.166 action=drop comment="DROP OPENEXT"
disabled=no
add chain=forward dst-address=210.22.12.245 action=drop comment="" disabled=no
add chain=forward dst-address=69.93.222.56 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=5000 action=drop comment="DRIP iLink
1.1 :5467 2500 4173 10002 10003" disabled=no
add chain=forward protocol=udp dst-port=5000 action=drop comment=""
disabled=no
add chain=forward dst-address=210.51.168.13 action=drop comment="DROP DDS
11608" disabled=no
add chain=forward dst-address=212.179.66.17 action=drop comment="" disabled=no
add chain=forward dst-address=211.157.105.252 action=drop comment=""
disabled=no
add chain=forward dst-address=212.179.66.17 action=drop comment="DROP iMesh 5
4662" disabled=no
add chain=forward dst-address=212.179.66.24 action=drop comment="" disabled=no
add chain=forward dst-address=38.117.175.23 action=drop comment="" disabled=no
add chain=forward dst-address=64.246.15.43 action=drop comment="DROP winmx
5690" disabled=no
add chain=forward dst-address=211.152.22.9 action=drop comment="DROP Wangku
port:2122" disabled=no
add chain=forward dst-address=211.152.22.101 action=drop comment=""
disabled=no
add chain=forward dst-address=221.192.132.29 action=drop comment=""
disabled=no
add chain=forward dst-address=219.153.0.152 action=drop comment="Drop Pipi
Dog" disabled=no
add chain=forward dst-address=61.145.116.186 action=drop comment=""
disabled=no
add chain=forward dst-address=219.239.95.106 action=drop
comment="垃圾病毒网站" disabled=no
add chain=forward dst-address=219.238.238.118 action=drop comment=""
disabled=no
add chain=forward dst-address=222.88.90.204 action=drop comment="" disabled=no
add chain=forward src-address=59.39.7.134 action=drop comment="" disabled=no
add chain=forward content=27h.com action=drop comment="" disabled=no
add chain=forward dst-address=219.239.95.12 action=drop comment="" disabled=no
add chain=forward dst-address=219.239.95.13 action=drop comment="" disabled=no
add chain=forward dst-address=219.239.95.10 action=drop comment="" disabled=no
add chain=forward dst-address=211.150.123.119 action=drop comment=""
disabled=no
add chain=forward dst-address=219.239.95.121 action=drop comment=""
disabled=no
add chain=forward dst-address=211.100.32.245 action=drop comment=""
disabled=no
add chain=forward protocol=tcp content=mm.com action=drop comment=""
disabled=no
add chain=forward protocol=tcp content=gg.com action=drop comment=""
disabled=no
add chain=forward protocol=tcp content=39com action=drop comment=""
disabled=no
add chain=forward content=angelus action=drop comment="" disabled=no
add chain=forward src-address=211.136.108.171 action=drop comment=""
disabled=no
add chain=forward src-address=61.237.229.230 action=drop comment=""
disabled=no
add chain=forward src-address=61.237.229.231 action=drop comment=""
disabled=no
add chain=forward src-address=61.237.229.233 action=drop comment=""
disabled=no
add chain=forward src-address=222.77.187.109 action=drop comment=""
disabled=no
add chain=forward in-interface=WAN protocol=tcp p2p=all-p2p action=drop
comment="禁止P2P下载" disabled=no
add chain=forward out-interface=WAN protocol=tcp p2p=all-p2p action=drop
comment="" disabled=no
add chain=forward src-address=59.36.100.150 action=drop comment="禁止百纳下载"
disabled=no
add chain=forward src-address=59.36.100.151 action=drop comment="" disabled=no
add chain=forward in-interface=WAN src-address=203.86.7.178 action=drop
comment="" disabled=no
add chain=forward out-interface=WAN src-address=203.86.7.178 action=drop
comment="" disabled=no
add chain=forward protocol=tcp dst-port=40750 action=drop comment="vagaa"
disabled=no
add chain=forward protocol=udp dst-port=40750 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=3076-3079 action=drop
comment="禁止迅雷下载" disabled=yes
add chain=forward dst-address=202.96.155.91 action=drop comment="" disabled=no
add chain=forward dst-address=210.22.12.53 action=drop comment="" disabled=no
add chain=forward dst-address=61.128.198.97 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=4661 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4662 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4242 action=drop comment=""
disabled=no
add chain=forward dst-address=62.241.53.15 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=8505 action=drop comment="PPGOU"
disabled=no
add chain=forward dst-address=219.153.0.152 action=drop comment="" disabled=no
add chain=forward dst-address=61.145.116.186 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=3318 action=drop comment="KUGO"
disabled=no
add chain=forward protocol=tcp dst-port=1043 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4224 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=2371 action=drop comment=""
disabled=no
add chain=forward protocol=udp dst-port=7000 action=drop comment=""
disabled=no
add chain=forward dst-address=218.16.125.227 action=drop comment=""
disabled=no
add chain=forward dst-address=61.143.210.56 action=drop comment="" disabled=no
add chain=forward dst-address=218.16.125.226 action=drop comment=""
disabled=no
add chain=forward dst-address=61.129.115.206 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.114.33 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=16881 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=6881-6890 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=8881-8890 action=drop comment=""
disabled=no
add chain=forward protocol=udp dst-port=16881 action=drop comment=""
disabled=no
add chain=forward protocol=udp dst-port=6881-6890 action=drop comment=""
disabled=no
add chain=forward protocol=udp dst-port=8881-8890 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=6346 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=11300 action=drop comment=""
disabled=no
add chain=forward dst-address=61.172.197.196 action=drop comment=""
disabled=no
add chain=forward dst-address=218.1.14.3 action=drop comment="" disabled=no
add chain=forward dst-address=218.1.14.4 action=drop comment="" disabled=no
add chain=forward dst-address=218.1.14.9 action=drop comment="" disabled=no
add chain=forward dst-address=61.172.197.209 action=drop comment=""
disabled=no
add chain=forward dst-address=218.1.14.5 action=drop comment="" disabled=no
add chain=forward dst-address=218.5.72.118 action=drop comment="" disabled=no
add chain=forward dst-address=61.172.197.196 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.126.150 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=50007 action=drop comment="PTC"
disabled=no
add chain=forward protocol=tcp dst-port=4371 action=drop comment="eDonkey2000"
disabled=no
add chain=forward protocol=tcp dst-port=4662 action=drop comment=""
disabled=no
add chain=forward dst-address=62.241.53.15 action=drop comment="" disabled=no
add chain=forward dst-address=62.241.53.17 action=drop comment="" disabled=no
add chain=forward protocol=udp src-port=8094 action=drop comment="Poco2005"
disabled=no
add chain=forward protocol=tcp dst-port=2881 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=5354 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.118.224 action=drop comment=""
disabled=no
add chain=forward dst-address=210.192.122.147 action=drop comment=""
disabled=no
add chain=forward dst-address=207.46.196.108 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=3751 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=3753 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4772 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4774 action=drop comment=""
disabled=no
add chain=forward dst-address=211.155.224.67 action=drop comment=""
disabled=no
add chain=forward dst-address=211.91.135.114 action=drop comment="RealLink"
disabled=no
add chain=forward dst-address=221.233.18.180 action=drop comment=""
disabled=no
add chain=forward dst-address=61.145.119.55 action=drop comment="" disabled=no
add chain=forward dst-address=221.3.132.99 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=3468 action=drop comment=""
disabled=no
add chain=forward dst-address=219.136.251.56 action=drop comment=""
disabled=no
add chain=forward dst-address=61.149.124.173 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=5093 action=drop comment="PP"
disabled=no
add chain=forward dst-address=221.229.241.243 action=drop comment=""
disabled=no
add chain=forward dst-address=202.96.137.56 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=6800-6801 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=7003 action=drop comment=""
disabled=no
add chain=forward dst-address=218.244.45.67 action=drop comment="" disabled=no
add chain=forward dst-address=220.169.192.145 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=9000 action=drop comment="P2P"
disabled=no
add chain=forward dst-address=221.233.19.30 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=5467 action=drop comment="OPENEXT"
disabled=no
add chain=forward protocol=tcp dst-port=2500 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=4173 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=10002 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=10003 action=drop comment=""
disabled=no
add chain=forward dst-address=66.197.13.166 action=drop comment="" disabled=no
add chain=forward dst-address=210.22.12.245 action=drop comment="" disabled=no
add chain=forward dst-address=69.93.222.56 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=5000 action=drop comment="iLink 1.1"
disabled=no
add chain=forward protocol=tcp dst-port=11608 action=drop comment="downP2P
DDS" disabled=no
add chain=forward dst-address=210.51.168.13 action=drop comment="" disabled=no
add chain=forward dst-address=211.157.105.252 action=drop comment=""
disabled=no
add chain=forward dst-address=212.179.66.17 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=4662 action=drop comment="downP2P
iMesh 5" disabled=no
add chain=forward dst-address=212.179.66.17 action=drop comment="" disabled=no
add chain=forward dst-address=212.179.66.24 action=drop comment="" disabled=no
add chain=forward dst-address=38.117.175.23 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=5690 action=drop comment="downP2P
winmx" disabled=no
add chain=forward dst-address=64.246.15.43 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=2122 action=drop comment=""
disabled=no
add chain=forward dst-address=211.152.22.9 action=drop comment="" disabled=no
add chain=forward dst-address=211.152.22.101 action=drop comment=""
disabled=no
add chain=forward dst-address=221.192.132.29 action=drop comment=""
disabled=no
add chain=forward protocol=tcp dst-port=8008 action=drop comment="PPlive"
disabled=no
add chain=forward protocol=udp dst-port=4004 action=drop comment=""
disabled=no
add chain=forward content=450666.com action=drop comment="及时雨外挂"
disabled=no
add chain=forward content=92045.com action=drop comment="" disabled=no
add chain=forward dst-address=222.84.227.88 dst-port=8000 action=drop
comment="" disabled=no
add chain=forward content=jsy666.com action=drop comment="" disabled=no
add chain=forward content=920666.com action=drop comment="" disabled=no
add chain=forward content=uc999 action=drop comment="" disabled=no
add chain=forward src-address=219.153.56.133 action=drop comment=""
disabled=no
add chain=forward src-address-type=!unicast action=drop comment="drop all that
is not from unicast" disabled=no
add chain=forward protocol=icmp action=jump jump-target=ICMP comment="jump to
chain ICMP" disabled=no
add chain=forward action=jump jump-target=virus comment="jump to virus chain"
disabled=no
/ ip firewall address-list
/ ip firewall service-port
set ftp ports=21 disabled=no
set tftp ports=69 disabled=no
set irc ports=6667 disabled=no
set h323 disabled=no
set quake3 disabled=no
set gre disabled=no
set pptp disabled=no

添加新评论