各位有使用Mikrotik RouterOS的前輩,您好
小弟使用的是RB750G, RouterOS 4.X
搜尋的一些阻擋IM (msn, yahoo messenger...,etc.)的文章
可是所學有限,實在看不懂
可否請高手教導一下,網路上搜尋到的做法的一些指令
Looking in the forums, I have seen several posts about how to block MSN Messenger.
Here is what I did and it's been working fine for MSN and Msn-related clients (ie: Trillian)
== Create a set of rules: ==
Connected with SSH or Console to your Mikrotik server, using command like this one:
''[admin] ip firewall filter add chain=forward protocol=tcp dst-address=207.46.110.0/24 action=drop log=yes comment="MSN Messenger" disabled=no
''
The whole set of rules I used in my scenario were:
''
14 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=1863 action=drop
15 X ;;; MSN Messenger
chain=forward dst-address=207.46.110.0/24 protocol=tcp action=drop
16 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=5190 action=drop
17 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=6901 action=drop
19 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=6891-6900 action=drop
20 X ;;; MSN Messenger
chain=forward protocol=tcp dst-port=7001 action=drop
21 X ;;; MSN Messenger
chain=forward dst-address=207.46.27.0/24 protocol=tcp action=drop
22 X ;;; MSN Messenger
chain=forward dst-address=207.46.111.0/24 protocol=tcp action=drop''
==============================================
另一個是用"Drop IM Using L7"
可是我完全看不懂
http://wiki.mikrotik.com/wiki/Drop_IM_Using_L7
不知道有沒有人知道如何在winbox設定就可以封鎖IM,而不需要下指令?
感恩
血戰76小時 wrote:
各位有使用Mikro...(恕刪)
要先取得ROS Layer 7 Protocols 的腳本
或者是取得有關IM 的相關Regexp 代碼,才能在ip firewall\Layer 7 Protocol 調用規則。
內文搜尋

X