routerOS防火墙规则

核心提示：ip firewall rule input !!防火墙!!!!add protocol=tcp tcp-options=no-sys-only connection-state=established action=accept comment="Established TCP connections&qu

ip firewall rule input !!防火墙!!!!

add protocol=tcp tcp-options=no-sys-only connection-state=established action=accept comment="Established TCP connections" disabled=no

add connect ion-state=related action=accept comment="Related connections" disabled=no

add dst-address=:69 protocol=tcp action=drop comment="drop blaster worm" disabled=no

add dst-address=:69 protocol=udp action=drop comment="drop blaster worm" disabled=no

add dst-address=:134-139 protocol=tcp action=drop comment="drop blaster worm" disabled=no

add dst-address=:134-139 protocol=udp action=drop comment="drop blaster worm" disabled=no

add dst-address=:161-162 protocol=tcp action=drop comment="drop SNMP Trap" disabled=no

add dst-address=:161-162 protocol=udp action=drop comment="drop SNMP Trap" disabled=no

add dst-address=:445 protocol=tcp action=drop comment="drop blaster worm" disabled=no

add dst-address=:445 protocol=udp action=drop comment="drop blaster worm" disabled=no

add dst-address=:554 protocol=tcp action=drop comment="drop blaster wrom" disabled=no

add dst-address=:554 protocol=udp action=drop comment="drop blaster worm" disabled=no

add dst-address=:593 protocol=tcp action=drop comment="drop blaster worm" disabled=no