ROS防火墙系列脚本

自动删除close连接提升系统性能的

/ system scheduler add name="del_close" on-event="/ip firewall connection remove [/ip firewall connection find tcp-state=close]" start-date=jan/01/1990 start-time=00:00:00 interval=1m comment="" disabled=no

自动重新启动脚本

/ system scheduler add name="Timing ReBoot" on-event="/ system reboot" start-date=Jan/01/1990 start-time="05:30:00" interval="1d 00:00:00" comment="\B6\A8\CA\B1\D6\D8\C6\F4" disabled=no

封锁迅雷，只让它从原始地址下载

/ip firewall filter add chain=forward content="octet-stream" action=drop comment="Blockade Thunder 1.thread" disabled=no

彻底封锁迅雷

/ip firewall filter add chain=forward content="octent-stream" action=drop comment="blockade thunder" disabled=no

/ip firewall filter add chain=forward content="pragma: no-cache" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="Connection: close" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="Range: bytes=" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="Cookie:__utma=" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="filename=" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="Cookie rtime=" action=drop comment="" disabled=no

/ip firewall filter add chain=forward content="Content-Disposition: attachment;" action=drop comment="" disabled=no

封QQ旋风

/ ip firewall address-list 

add list="BlockadeQqXuanFeng" address=124.115.5.173 comment="" disabled=no 

add list="BlockadeQqXuanFeng" address=119.147.18.173 comment="" disabled=no 

add list="BlockadeQqXuanFeng" address=117.95.243.97 comment="" disabled=no 

add list="BlockadeQqXuanFeng" address=124.115.0.180 comment="" disabled=no 

/ ip firewall filter 

add chain=forward dst-address-list="BlockadeQqXuanFeng" action=drop comment="BlockadeQqXuanFeng" disabled=no

封P2P类的

/ ip firewall filter

add chain=input protocol=udp dst-port=137-138 action=drop comment="drop udp137-138"

add chain=forward protocol=tcp dst-port=4661 action=drop comment="downP2P VeryCD"

add chain=forward protocol=tcp dst-port=4662 action=drop

add chain=forward protocol=tcp dst-port=4242 action=drop

add chain=forward dst-address=62.241.53.15/32 action=drop

# 屁屁狗(PPGOU)

add chain=forward protocol=tcp dst-port=8505 action=drop comment="downTools PPGOU"

add chain=forward dst-address=219.153.0.152/32 action=drop

add chain=forward dst-address=61.145.116.186/32 action=drop

# KUGO酷狗

add chain=forward protocol=tcp dst-port=3318 action=drop comment="downMP3 KUGO" disabled=yes

add chain=forward protocol=tcp dst-port=1043 action=drop disabled=yes

add chain=forward protocol=tcp dst-port=4224 action=drop disabled=yes

add chain=forward protocol=tcp dst-port=2371 action=drop disabled=yes

add chain=forward protocol=udp dst-port=7000 action=drop disabled=yes

add chain=forward dst-address=218.16.125.227/32 action=drop disabled=yes

add chain=forward dst-address=61.143.210.56/32 action=drop disabled=yes

add chain=forward dst-address=218.16.125.226/32 action=drop disabled=yes

add chain=forward dst-address=61.129.115.206/32 action=drop disabled=yes

add chain=forward dst-address=61.145.114.33/32 action=drop disabled=yes

# RF online

add chain=forward dst-address=218.30.85.16/32 dst-port=8888 action=accept comment="RF online"

add chain=forward dst-address=59.34.215.133/32 dst-port=8888 action=accept

add chain=forward dst-address=60.28.26.66/32 dst-port=8888 action=accept

# 比特精灵

add chain=forward protocol=tcp dst-port=16881 action=drop comment="downP2P BitSpirit"

add chain=forward protocol=tcp dst-port=6881-6890 action=drop

add chain=forward protocol=tcp dst-port=8881-8890 action=drop

add chain=forward protocol=udp dst-port=16881 action=drop

add chain=forward protocol=udp dst-port=6881-6890 action=drop

add chain=forward protocol=udp dst-port=8881-8890 action=drop

# 宝酷

add chain=forward protocol=tcp dst-port=6346 action=drop comment="downP2P BaoCue"

add chain=forward protocol=tcp dst-port=11300 action=drop

add chain=forward dst-address=61.172.197.196/32 action=drop

add chain=forward dst-address=218.1.14.3/32 action=drop

add chain=forward dst-address=218.1.14.4/32 action=drop

add chain=forward dst-address=218.1.14.9/32 action=drop

add chain=forward dst-address=61.172.197.209/32 action=drop

add chain=forward dst-address=61.172.197.197/32 action=drop

add chain=forward dst-address=218.1.14.5/32 action=drop

add chain=forward dst-address=218.5.72.118/32 action=drop

add chain=forward dst-address=61.172.197.196/32 action=drop

# 百度下吧

add chain=forward protocol=tcp dst-port=11000 action=drop comment="downP2P BaiDuXiaBa" disabled=yes

add chain=forward dst-address=202.108.249.171/32 action=drop

禁止QQ登录

/ ip firewall filter 

ad chain=forward protocol=tcp dst-port=8008 action=drop comment="QQServer"

ad chain=forward protocol=udp dst-port=8000 action=drop

add chain=forward dst-address=61.144.238.0/24 action=drop 

add chain=forward dst-address=61.152.100.0/24 action=drop 

add chain=forward dst-address=61.141.194.0/24 action=drop 

add chain=forward dst-address=202.96.170.163/32 action=drop 

add chain=forward dst-address=202.104.129.0/24 action=drop 

add chain=forward dst-address=202.104.193.20/32 action=drop 

add chain=forward dst-address=202.104.193.11/32 action=drop 

add chain=forward dst-address=202.104.193.12/32 action=drop 

add chain=forward dst-address=218.17.209.23/32 action=drop 

add chain=forward dst-address=218.18.95.153/32 action=drop 

add chain=forward dst-address=218.18.95.165/32 action=drop 

add chain=forward dst-address=218.18.95.220/32 action=drop 

add chain=forward dst-address=218.85.138.70/32 action=drop 

add chain=forward dst-address=219.133.38.0/24 action=drop 

add chain=forward dst-address=219.133.49.0/24 action=drop 

add chain=forward dst-address=220.133.40.0/24 action=drop 

add chain=forward content=sz.tencent.com action=reject 

add chain=forward content=sz2.tencent.com action=reject 

add chain=forward content=sz3.tencent.com action=reject 

add chain=forward content=sz4.tencent.com action=reject 

add chain=forward content=sz5.tencent.com action=reject 

add chain=forward content=sz6.tencent.com action=reject 

add chain=forward content=sz7.tencent.com action=reject 

add chain=forward content=sz8.tencent.com action=rejec 

add chain=forward content=sz9.tencent.com action=rejec 

add chain=forward content=tcpconn.tencent.com action=reject 

add chain=forward content=tcpconn2.tencent.com action=reject 

add chain=forward content=tcpconn3.tencent.com action=reject 

add chain=forward content=tcpconn4.tencent.com action=reject 

add chain=forward content=tcpconn5.tencent.com action=reject 

add chain=forward content=tcpconn6.tencent.com action=reject 

add chain=forward content=tcpconn7.tencent.com action=reject 

add chain=forward content=tcpconn8.tencent.com action=reject 

add chain=forward content=qq.com action=reject 

add chain=forward content=www.qq.com action=reject 

禁止pplive

/ ip firewall filter

add chain=input protocol=udp dst-port=137-138 action=drop comment="drop udp137-138"

add chain=forward protocol=tcp dst-port=8008 action=drop comment="P2PTV PPlive"

add chain=forward protocol=udp dst-port=4004 action=drop

禁止QQ直播

/ ip firewall filter

add chain=input protocol=udp dst-port=137-138 action=drop comment="drop udp137-138"

add chain=forward protocol=udp dst-port=13002-13999 action=drop comment="P2PTV QQ" disabled=yes