设为首页收藏本站
切换到窄版

 找回密码
 注册

QQ登录

只需一步，快速开始

搜索
自由的生活_软路由»交流 › ：：技术区：： › RouterOS › 外网网卡问题掉线问题
返回列表 发新帖
查看: 1567|回复: 12

[其它] 外网网卡问题掉线问题

[复制链接]
发表于 2006-12-25 21:29:19 | 显示全部楼层 |阅读模式

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要 登录 才可以下载或查看，没有账号？注册

×
今天发生了很奇怪的问题，我用的是 2.96 ，用一段时间，大约半个小时左右，外网网卡的 发送和接受数据包 都变成了0 ，当然也掉线了，内网网卡是好的，不知道是什么原因，是网卡，还是网络方面的呢？我从Connection 和 Accounting 里面看都是正常的。谁能帮我解决下。

ARP问题好象也不是，客户机都可以PING内网网卡，唯一的就是 外网网卡的 TX Rate 和 RX Rate 都是0，谁知道是什么原因？

谢谢了
routeros
回复

使用道具 举报

 楼主| 发表于 2006-12-25 22:24:37 | 显示全部楼层
没人知道吗？真的很急呀！
routeros
回复

使用道具 举报

 楼主| 发表于 2006-12-26 01:47:45 | 显示全部楼层
版主在吗？大家能帮忙看看不？？
routeros
回复

使用道具 举报

发表于 2006-12-26 02:08:07 | 显示全部楼层
先排除硬件问题，换个网卡试试
routeros
回复

使用道具 举报

 楼主| 发表于 2006-12-26 09:55:30 | 显示全部楼层
谢谢精品，还有，我用的主板是INTEL原装915GAV，网卡是INTEL原装8460M pro 100M
不知道是不是兼容性问题！还是ROS对915主板的支持不太好？
routeros
回复

使用道具 举报

zooyo
发表于 2006-12-26 10:12:12 | 显示全部楼层
这也用得太高档了吧，815就绰绰有余了。
routeros
回复

使用道具 举报

 楼主| 发表于 2006-12-26 10:44:59 | 显示全部楼层
主要是现在难找呀，现在我这里的配置都是945主板，本来是想拿865或者845装的，不过现在都停产了，二手的用的不放心，拿945装，启动不了。就买915装了，不过也才500块钱，都差不多，不知道怎么会出现这样的情况，我试了好几种方法，现在把放火强禁用了，没再出现，不过就是ping一个通宵内网网关，有32个丢包，不知道是怎么了。。登陆ROS的ftp看见FTP里面有个TXT的文档 ：console-dump.txt  ，内容都是流量监视的，也运行了几天了，几天没上去看，装好的时候反正是没有的，不知道现在怎么出现了。里面内容是这样的：

# dec/25/2006 20:17:26 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 1190
     received-bits-per-second: 2.9Mbps
      sent-packets-per-second: 1230
         sent-bits-per-second: 4.2Mbps
# dec/25/2006 20:17:27 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 847
     received-bits-per-second: 2.6Mbps
      sent-packets-per-second: 767
         sent-bits-per-second: 3.6Mbps
# dec/25/2006 20:17:28 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 636
     received-bits-per-second: 2.3Mbps
      sent-packets-per-second: 615
         sent-bits-per-second: 5.6Mbps
# dec/25/2006 20:17:29 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 918
     received-bits-per-second: 3Mbps
      sent-packets-per-second: 811
         sent-bits-per-second: 4.5Mbps
# dec/25/2006 20:17:29 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 778
     received-bits-per-second: 1.7Mbps
      sent-packets-per-second: 827
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:30 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 778
     received-bits-per-second: 1.7Mbps
      sent-packets-per-second: 827
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:30 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 778
     received-bits-per-second: 1.7Mbps
      sent-packets-per-second: 827
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:30 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 778
     received-bits-per-second: 1.7Mbps
      sent-packets-per-second: 827
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:30 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 789
     received-bits-per-second: 2.1Mbps
      sent-packets-per-second: 722
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:31 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 789
     received-bits-per-second: 2.1Mbps
      sent-packets-per-second: 722
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:31 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 789
     received-bits-per-second: 2.1Mbps
      sent-packets-per-second: 722
         sent-bits-per-second: 4.7Mbps
# dec/25/2006 20:17:31 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:31 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 722
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 750
         sent-bits-per-second: 3.1Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:32 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 775
     received-bits-per-second: 3.2Mbps
      sent-packets-per-second: 770
         sent-bits-per-second: 2.8Mbps
# dec/25/2006 20:17:33 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 595
     received-bits-per-second: 4.6Mbps
      sent-packets-per-second: 637
         sent-bits-per-second: 5.5Mbps
# dec/25/2006 20:17:34 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 595
     received-bits-per-second: 4.6Mbps
      sent-packets-per-second: 637
         sent-bits-per-second: 5.5Mbps
# dec/25/2006 20:17:34 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 595
     received-bits-per-second: 4.6Mbps
      sent-packets-per-second: 637
         sent-bits-per-second: 5.5Mbps
# dec/25/2006 20:17:34 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 595
     received-bits-per-second: 4.6Mbps
      sent-packets-per-second: 637
         sent-bits-per-second: 5.5Mbps
# dec/25/2006 20:17:34 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 1108
     received-bits-per-second: 3.8Mbps
      sent-packets-per-second: 1194
         sent-bits-per-second: 4.8Mbps
# dec/25/2006 20:17:35 by RouterOS 2.9.6
# software id = AEWN-GZT
#
  received-packets-per-second: 1108
     received-bits-per-second: 3.8Mbps
      sent-packets-per-second: 1194
         sent-bits-per-second: 4.8Mbps


还有我要说下，关于这个放火墙，网上很流行，是有问题的，限制HTTP应该不要，ROS长时间运行后，下面的客户机会有打不开网页的情况，是http限制，还有TCP限制，我限到TCP100还是出问题，大家用这个防火墙的赶快换掉！

# www.mikrotik.com.cn RouterOS v2.9
# firewall filte scripts

/ ip firewall filter
add chain=input connection-state=invalid action=drop \
    comment="丢弃非法连接packets" disabled=no
add chain=input protocol=tcp dst-port=80 connection-limit=60,0 action=drop \
    comment="限制总http连接数为60" disabled=no
add chain=input protocol=tcp psd=21,3s,3,1 action=drop \
    comment="探测并丢弃端口扫描连接" disabled=no
add chain=input protocol=tcp connection-limit=3,32 src-address-list=black_list \
    action=tarpit comment="压制DoS攻击" disabled=no
add chain=input protocol=tcp connection-limit=10,32 \
    action=add-src-to-address-list address-list=black_list \
    address-list-timeout=1d comment="探测DoS攻击" disabled=no
add chain=input dst-address-type=!local action=drop comment="丢弃掉非本地数据" \
    disabled=no
add chain=input src-address-type=!unicast action=drop \
    comment="丢弃掉所有非单播数据" disabled=no
add chain=input protocol=tcp action=jump jump-target=virus \
    comment="跳转到病毒链表" disabled=no
add chain=forward connection-state=established action=accept \
    comment="接受以连接的数据包" disabled=no
add chain=forward connection-state=related action=accept \
    comment="接受相关数据包" disabled=no
add chain=forward connection-state=invalid action=drop \
    comment="丢弃非法数据包" disabled=no
add chain=forward protocol=tcp connection-limit=30,32 action=drop \
    comment="限制每个主机TCP连接数为30条" disabled=no
add chain=forward src-address-type=!unicast action=drop \
    comment="丢弃掉所有非单播数据" disabled=no
add chain=forward action=jump jump-target=virus comment="跳转到病毒链表" \
    disabled=no
add chain=forward action=accept comment="接受任何数据" disabled=no
add chain=virus protocol=tcp dst-port=41 action=drop \
    comment="DeepThroat.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=82 action=drop \
    comment="Worm.NetSky.Y@mm" disabled=no
add chain=virus protocol=tcp dst-port=113 action=drop \
    comment="W32.Korgo.A/B/C/D/E/F-1" disabled=no
add chain=virus protocol=tcp dst-port=2041 action=drop \
    comment="W33.Korgo.A/B/C/D/E/F-2" disabled=no
add chain=virus protocol=tcp dst-port=3150 action=drop \
    comment="DeepThroat.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3067 action=drop \
    comment="W32.Korgo.A/B/C/D/E/F-3" disabled=no
add chain=virus protocol=tcp dst-port=3422 action=drop \
    comment="Backdoor.IRC.Aladdinz.R-1" disabled=no
add chain=virus protocol=tcp dst-port=6667 action=drop \
    comment="W32.Korgo.A/B/C/D/E/F-4" disabled=no
add chain=virus protocol=tcp dst-port=6789 action=drop \
    comment="Worm.NetSky.S/T/U@mm" disabled=no
add chain=virus protocol=tcp dst-port=8787 action=drop \
    comment="Back.Orifice.2000.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=8879 action=drop \
    comment="Back.Orifice.2000.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=8967 action=drop \
    comment="W32.Dabber.A/B-2" disabled=no
add chain=virus protocol=tcp dst-port=9999 action=drop \
    comment="W32.Dabber.A/B-3" disabled=no
add chain=virus protocol=tcp dst-port=20034 action=drop \
    comment="Block.NetBus.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=21554 action=drop \
    comment="GirlFriend.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=31666 action=drop \
    comment="Back.Orifice.2000.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=43958 action=drop \
    comment="Backdoor.IRC.Aladdinz.R-2" disabled=no
add chain=virus protocol=tcp dst-port=999 action=drop \
    comment="DeepThroat.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6670 action=drop \
    comment="DeepThroat.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6771 action=drop \
    comment="DeepThroat.Trojan-5" disabled=no
add chain=virus protocol=tcp dst-port=60000 action=drop \
    comment="DeepThroat.Trojan-6" disabled=no
add chain=virus protocol=tcp dst-port=2140 action=drop \
    comment="DeepThroat.Trojan-7" disabled=no
add chain=virus protocol=tcp dst-port=10067 action=drop \
    comment="Portal.of.Doom.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=10167 action=drop \
    comment="Portal.of.Doom.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3700 action=drop \
    comment="Portal.of.Doom.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=9872-9875 action=drop \
    comment="Portal.of.Doom.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6883 action=drop \
    comment="Delta.Source.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=26274 action=drop \
    comment="Delta.Source.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop \
    comment="Delta.Source.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=47262 action=drop \
    comment="Delta.Source.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=3791 action=drop \
    comment="Eclypse.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3801 action=drop \
    comment="Eclypse.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65390 action=drop \
    comment="Eclypse.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5880-5882 action=drop \
    comment="Y3K.RAT.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5888-5889 action=drop \
    comment="Y3K.RAT.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=30100-30103 action=drop \
    comment="NetSphere.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=30133 action=drop \
    comment="NetSphere.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7300-7301 action=drop \
    comment="NetMonitor.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7306-7308 action=drop \
    comment="NetMonitor.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=79 action=drop \
    comment="FireHotcker.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5031 action=drop \
    comment="FireHotcker.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5321 action=drop \
    comment="FireHotcker.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6400 action=drop \
    comment="TheThing.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7777 action=drop \
    comment="TheThing.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1047 action=drop \
    comment="GateCrasher.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=6969-6970 action=drop \
    comment="GateCrasher.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2774 action=drop comment="SubSeven-1" \
    disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="SubSeven-2" \
    disabled=no
add chain=virus protocol=tcp dst-port=1243 action=drop comment="SubSeven-3" \
    disabled=no
add chain=virus protocol=tcp dst-port=1234 action=drop comment="SubSeven-4" \
    disabled=no
add chain=virus protocol=tcp dst-port=6711-6713 action=drop \
    comment="SubSeven-5" disabled=no
add chain=virus protocol=tcp dst-port=16959 action=drop comment="SubSeven-7" \
    disabled=no
add chain=virus protocol=tcp dst-port=25685-25686 action=drop \
    comment="Moonpie.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=25982 action=drop \
    comment="Moonpie.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=31337-31339 action=drop \
    comment="NetSpy.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=8102 action=drop comment="Trojan" \
    disabled=no
add chain=virus protocol=tcp dst-port=8011 action=drop comment="WAY.Trojan" \
    disabled=no
add chain=virus protocol=tcp dst-port=7626 action=drop comment="Trojan.BingHe" \
    disabled=no
add chain=virus protocol=tcp dst-port=19191 action=drop \
    comment="Trojan.NianSeHoYian" disabled=no
add chain=virus protocol=tcp dst-port=23444-23445 action=drop \
    comment="NetBull.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=2583 action=drop \
    comment="WinCrash.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3024 action=drop \
    comment="WinCrash.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4092 action=drop \
    comment="WinCrash.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5714 action=drop \
    comment="WinCrash.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=1010-1012 action=drop \
    comment="Doly1.0/1.35/1.5trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1015 action=drop \
    comment="Doly1.0/1.35/1.5trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2001-2005 action=drop \
    comment="TransScout.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=9878 action=drop \
    comment="TransScout.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2773 action=drop \
    comment="Backdoor.YAI..Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7215 action=drop \
    comment="Backdoor.YAI.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=54283 action=drop \
    comment="Backdoor.YAI.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=1003 action=drop \
    comment="BackDoorTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5598 action=drop \
    comment="BackDoorTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5698 action=drop \
    comment="BackDoorTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=31554 action=drop \
    comment="SchainwindlerTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=18753 action=drop \
    comment="Shaft.DDoS.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=20432 action=drop \
    comment="Shaft.DDoS.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65000 action=drop \
    comment="Devil.DDoS.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=11831 action=drop \
    comment="LatinusTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=29559 action=drop \
    comment="LatinusTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1784 action=drop \
    comment="Snid.X2Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3586 action=drop \
    comment="Snid.X2Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7609 action=drop \
    comment="Snid.X2Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=12348-12349 action=drop \
    comment="BionetTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=12478 action=drop \
    comment="BionetTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=57922 action=drop \
    comment="BionetTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=3127-3198 action=drop \
    comment="Worm.Novarg.a.Mydoom.a." disabled=no
add chain=virus protocol=tcp dst-port=6777 action=drop \
    comment="Worm.BBeagle.a.Bagle.a." disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop \
    comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop \
    comment="Worm.BBeagle.c-g/j-l" disabled=no
add chain=virus protocol=tcp dst-port=2556 action=drop \
    comment="Worm.BBeagle.p/q/r/n" disabled=no
add chain=virus protocol=tcp dst-port=20742 action=drop \
    comment="Worm.BBEagle.m-2" disabled=no
add chain=virus protocol=tcp dst-port=4751 action=drop \
    comment="Worm.BBeagle.s/t/u/v" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop \
    comment="Worm.BBeagle.aa/ab/w/x-z-2" disabled=no
add chain=virus protocol=tcp dst-port=5238 action=drop \
    comment="Worm.LovGate.r.RpcExploit" disabled=no
add chain=virus protocol=tcp dst-port=1068 action=drop comment="Worm.Sasser.a" \
    disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop \
    comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9996 action=drop \
    comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9995 action=drop comment="Worm.Sasser.d" \
    disabled=no
add chain=virus protocol=tcp dst-port=10168 action=drop \
    comment="Worm.Lovgate.a/b/c/d" disabled=no
add chain=virus protocol=tcp dst-port=20808 action=drop \
    comment="Worm.Lovgate.v.QQ" disabled=no
add chain=virus protocol=tcp dst-port=1092 action=drop \
    comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=20168 action=drop \
    comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=1363-1364 action=drop \
    comment="ndm.requester" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen.cast" \
    disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx" \
    disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichainlid" \
    disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop \
    comment="Backdoor.Optixprotocol" disabled=no
add chain=virus protocol=tcp dst-port=8888 action=drop \
    comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=udp dst-port=44444 action=drop \
    comment="Delta.Source.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=8998 action=drop \
    comment="Worm.Sobig.f-3" disabled=no
add chain=virus protocol=udp dst-port=123 action=drop comment="Worm.Sobig.f-1" \
    disabled=no
routeros
回复

使用道具 举报

zooyo
发表于 2006-12-26 11:00:57 | 显示全部楼层
建议，禁用所有防火墙！
routeros
回复

使用道具 举报

 楼主| 发表于 2006-12-26 13:29:51 | 显示全部楼层
恩，现在我的几台都已经禁用了，真是害人不浅呀！都怪自己不懂，但是防火墙好象和 外网网卡发送接收不到数据包没关系吧！
routeros
回复

使用道具 举报

whaoxx
发表于 2006-12-27 21:47:03 | 显示全部楼层

楼主在吗?

楼主在吗》我的也是外面没有下载数据自动变0
{463BAC5D-0D9F-4B36-AF5B-76EDABD97141}.JPG
routeros
回复

使用道具 举报

whaoxx
发表于 2006-12-27 21:49:33 | 显示全部楼层

楼主在吗?

楼主在吗》我的也是外面没有下载数据自动变0
{463BAC5D-0D9F-4B36-AF5B-76EDABD97141}.JPG
routeros
回复

使用道具 举报

senmail
发表于 2007-1-14 15:48:38 | 显示全部楼层

内网正常，外网掉！

顶，我也一样!

求助。也是2.96
routeros
回复

使用道具 举报

hlwdn
发表于 2007-3-15 09:53:32 | 显示全部楼层
没人懂么？怎么解决呀？
routeros
回复

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|手机版|小黑屋|软路由 ( 渝ICP备15001194号-1|渝公网安备 50011602500124号 )

GMT+8, 2024-5-3 17:34 , Processed in 0.074260 second(s), 6 queries , Gzip On, Redis On.

Powered by Discuz! X3.5 Licensed

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表