liyun 发表于 2009-12-13 02:44:48

防火墙配置

/ip firewall rule input add connection-state=invalid action=drop \

   comment="Drop invalid connection packets"

/ip firewall rule input add connection-state=established \

   comment="Allow established connections"

/ip firewall rule input add connection-state=related \

   comment="Allow related connections"

/ip firewall rule input add protocol=udp comment="Allow UDP"

/ip firewall rule input add protocol=icmp comment="Allow ICMP Ping"

/ip firewall rule input add src-address=192.168.0.0/24 \

   comment="From my home network"

/ip firewall rule input add action=drop log=yes \

   comment="Log and drop everything else"
配置防火墙:保护你的路由器
(可选)配置DHCP服务散发IP配置到你的家庭网络中去:
/ip pool add name=private ranges=192.168.0.2-192.168.0.254

/ip dhcp-server network add gateway=192.168.0.1 address=192.168.0.0/24 \

   dns-server=195.13.160.52,195.122.1.59 domain="mail.com"

/ip dhcp-server add name=home interface=ether2 lease-time=3h \

   address-pool=private   

/ip dhcp-server enable home
页: [1]
查看完整版本: 防火墙配置