routeros297安裝使用(完整版)
【正文】 / ip firewall connection tracking set enabled=yes tcpsynsenttimeout=1m tcpsynreceivedtimeout=1m \ tcpestablishedtimeout=1d tcpfinwaittimeout=10s \ tcpclosewaittimeout=10s tcplastacktimeout=10s \ tcptimewaittimeout=10s tcpclosetimeout=10s udptimeout=10s \ udpstreamtimeout=3m icmptimeout=10s generictimeout=10m ? / ip firewall filter add chain=input protocol=tcp dstport=135139 action=drop add chain=input protocol=udp dstport=135139 action=drop add chain=input connectionstate=established action=accept add chain=input connectionstate=related action=accept add chain=input srcaddress= dstaddress= action=accept add chain=input connectionstate=invalid action=drop add chain=input dstaddresstype=!local action=drop add chain=input srcaddresstype=!unicast action=drop add chain=input protocol=tcp psd=21,3s,3,1 action=drop add chain=input protocol=tcp connectionlimit=10,32 action=addsrctoaddresslist addresslist=black_list addresslisttimeout=1d add chain=input protocol=tcp connectionlimit=3,32 srcaddresslist=black_list action=tarpit add chain=input protocol=icmp icmpoptions=0:0255 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=3:3 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=3:4 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=8:0255 limit=5,5 action=accept ? add chain=input protocol=icmp icmpoptions=11:0255 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=0:0255 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=3:3 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=3:4 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=8:0255 limit=5,5 action=accept add chain=output protocol=icmp
范文總結(jié)相關(guān)推薦
鄂ICP備17016276號-1