routeros297安裝使用-資料下載頁(yè)
2025-05-10 19:22本頁(yè)面
【正文】 2 srcaddresslist=black_list action=tarpit disabled=no ? + ICMP相關(guān) + 允許常見命令 ping tracert,其它 ICMP丟棄 add chain=input protocol=icmp icmpoptions=0:0255 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=3:3 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=3:4 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=8:0255 limit=5,5 action=accept add chain=input protocol=icmp icmpoptions=11:0255 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=0:0255 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=3:3 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=3:4 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=8:0255 limit=5,5 action=accept add chain=output protocol=icmp icmpoptions=11:0255 limit=5,5 action=accept add chain=forward protocol=icmp icmpoptions=0:0255 limit=5,5 action=accept add chain=forward protocol=icmp icmpoptions=3:3 limit=5,5 action=accept add chain=forward protocol=icmp icmpoptions=3:4 limit=5,5 action=accept add chain=forward protocol=icmp icmpoptions=8:0255 limit=5,5 action=accept add chain=forward protocol=icmp icmpoptions=11:0255 limit=5,5 action=accept add chain=input protocol=icmp action=drop add chain=output protocol=icmp action=drop add chain=forward protocol=icmp action=drop ? / ip firewall serviceport set ftp ports=21 disabled=no set tftp ports=69 disabled=no set irc ports=6667 disabled=no set h323 disabled=no set quake3 disabled=no set mms disabled=no set gre disabled=no set pptp disabled=no + MMS值 + 對(duì)于光纖接入的沒多大關(guān)系，但對(duì)于 ADSL如果某些網(wǎng)頁(yè)打不開，可以修改一下 . /ip firewall mangle add chain=forward protocol=tcp tcpflags=syn action=changemss newmss=1440 ? 繼續(xù)每五行一次這樣復(fù)制進(jìn)來(lái)。如圖 ? 然后點(diǎn)擊 IPFirewall；選擇 Filter Rules ? 看到什么了。上面的防火墻，具體用到什么還要選擇一下。
范文總結(jié)相關(guān)推薦
鄂ICP備17016276號(hào)-1