在官方WIKI找了每個都差異蠻多的
不然就是重覆到，似乎會增加CPU使用量
有時會發現一個規則有相同說明，卻做不同的動作
還有些規則是設定上去後都長期掛0的無用規則...
若方便的話還請先進提供自己的規則供參考，感謝
tsengleoo wrote:firewall filter每個人使用的環境不同,倘若您心中沒定案,您可以如此:
請問大家通用的防火...(恕刪)
1.先置個人的網域清單
/ip firewall address
2.防火牆 (紅框的是VPN-Server負責的部份,未啟用VPN可省缺)
/ip firewall filter
add chain=input comment="Local area network" src-address-list=All-Lan
add chain=input comment="Mobile Devices" src-address-list=mobile
add chain=input comment="VPN Clients" dst-port=1723,81,1195 protocol=tcp \
src-address-list=temp
add chain=input dst-port=1701,500,4500 protocol=udp src-address-list=temp
add chain=input protocol=gre
add action=reject chain=input reject-with=icmp-admin-prohibited \
src-address-list="port scanners"
add action=add-src-to-address-list address-list=temp address-list-timeout=1m20s \
chain=input dst-port=1723 protocol=tcp
add chain=input dst-port=1723 protocol=tcp
add action=add-src-to-address-list address-list=temp address-list-timeout=1m20s \
chain=input dst-port=81 protocol=tcp
add chain=input dst-port=81 protocol=tcp
add action=add-src-to-address-list address-list=temp address-list-timeout=1m20s \
chain=input dst-port=1701,500 protocol=udp
add chain=input dst-port=1701,500,4500 protocol=udp
add action=add-src-to-address-list address-list=temp address-list-timeout=1m20s \
chain=input dst-port=1195 protocol=tcp
add chain=input dst-port=1195 protocol=tcp
add chain=input comment="Connection Responses" connection-state=established
add action=reject chain=input comment="Undefined discarded packets"
add action=reject chain=output dst-address=255.255.255.255
3.VPN用戶過濾腳本 (需搭配firewall filter VPN規則,未啟用VPN可省缺):
/system scheduler
https://dl.dropboxusercontent.com/u/34743921/vpncheck.txt
只要嘗試登入VPN-Server,
卻沒在1分鐘內成功登入的用戶將被腳本丟置port scanners,並封鎖7日...
NeverGiveUp!!! wrote:
安啦！免擔心（放上...(恕刪)
通常電子產品掛都是產生不穩非是真的死機
我的就是CCR1036,你還想投入CCR嗎??他的風聲滿大聲的
我放臥房聽習慣了才有辦法睡覺
Voltage 16.9 V
Temperature 49 C
CPU Temperature 55 C
Uptime 1d 04:58:10
Free Memory 444.9 MiB
Total Memory 469.8 MiB
CPU e500v2
CPU Count 2
CPU Frequency 533 MHz
CPU Load 1 %
Free HDD Space 429.7 MiB
Total HDD Size 512.0 MiB
Architecture Name powerpc
Board Name RB850Gx2
Version 6.34.6 (bugfix)
Build Time Jun/06/2016 08:37:27
內文搜尋
從 APP 打開
X