MikroTik RouterOS (часть 3) - [49] :: В помощь системному администратору

Код:

0 ;;; Accept winbox
chain=input action=accept protocol=tcp src-address-list=admin dst-port=8291

1 chain=input action=drop protocol=tcp dst-port=8291

2 chain=forward action=drop dst-address=192.168.111.0/24

3 ;;; spammer
chain=forward action=drop protocol=tcp src-address-list=spammer dst-port=25

4 chain=forward action=add-src-to-address-list protocol=tcp src-address-list=!spammer
address-list=spammer address-list-timeout=1d dst-port=25 connection-limit=10,32
limit=30,5

5 ;;; tcp session limit
chain=forward action=drop protocol=tcp src-address-list=(PCQ_Limit)
connection-limit=70,32

6 ;;; tcp session unlimit
chain=forward action=drop protocol=tcp src-address-list=(PCQ_QoS_Unlim)
connection-limit=50,32
7 ;;; tcp session unlimit1
chain=forward action=drop protocol=tcp src-address-list=07.Unlimit-1024
connection-limit=50,32

8 X ;;; tcp session torrent
chain=forward action=drop protocol=tcp src-address-list=(reserve_channel)
connection-limit=35,32

9 X ;;; uTP uTorrent
chain=forward action=drop protocol=udp layer7-protocol=\B5TP

10 X ;;; block torrent wwws
chain=forward action=drop layer7-protocol=torrent-wwws

11 X ;;; DHT Torrent drop
chain=forward action=drop protocol=udp layer7-protocol=DHT

12 X ;;; block torrent dns
chain=forward action=drop protocol=udp layer7-protocol=torrent-dns dst-port=53

13 X ;;; block p2p traffic
chain=forward action=drop p2p=all-p2p

14 ;;; Drop Invalid connections
chain=input action=drop connection-state=invalid
15 ;;; Allow Established connections
chain=input action=accept connection-state=established

16 ;;; Allow ICMP
chain=input action=accept protocol=icmp

17 chain=input action=accept src-address-list=(reserve_channel) in-interface=!wan-1

18 chain=input action=accept src-address-list=(reserve_channel) in-interface=!wan-2

19 chain=input action=accept src-address-list=(reserve_channel) in-interface=!wan-3

20 chain=input action=accept src-address-list=(reserve_channel) in-interface=!wan-4

21 ;;; Drop everything else
chain=input action=drop

Код:

0 R wan-1 ether 1500 1524
1 R wan-2 ether 1500 1524
2 R wan-3 ether 1500 1524
3 R wan-4 ether 1500 1524
4 R LAN ether 1500 1524
5 R PABLIC_1_d pppoe-out 1480
6 R PABLIC_2_w pppoe-out 1440
7 R PABLIC_3_w1 pppoe-out 1440
8 R PABLIC_4_w2 pppoe-out 1440

Модерирует : lynx, Crash_Master, dg, emx, ShriEkeR
ShriEkeR (05-01-2012 00:59):	Версия для печати • Подписаться • Добавить в закладки
Страницы: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147