发个封2008-6-12QQ直播的规则 测试可用!!

xgh5188

/ ip firewall filter
add chain=virus protocol=udp dst-port=13002-13999 action=drop comment="P2PTV \
    QQ直播" disabled=no
add chain=virus dst-address=58.61.166.211 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=58.61.32.11 protocol=udp dst-port=8000 action=drop \
    comment="" disabled=no
add chain=virus dst-address=60.28.234.117 protocol=tcp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=61.183.55.217 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=61.183.55.219 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=222.208.156.55 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=58.61.166.179 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=61.157.124.121 protocol=tcp dst-port=80 \
    action=drop comment="" disabled=no
add chain=virus dst-address=121.14.77.138 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=121.14.77.118 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=121.14.75.115 protocol=tcp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=219.133.60.243 protocol=tcp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=219.133.62.66 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=219.133.51.160 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=222.28.155.37 protocol=tcp dst-port=8000 \
    action=drop comment="" disabled=no
add chain=virus dst-address=121.9.209.3 protocol=udp dst-port=8000 action=drop \
    comment="" disabled=no


我一直没搞明白 forward  input  output 这三个的意思但我试着封闭百度时发现我用别人的防火墙 如果选 virus就可以封掉
如果你们没封掉 你们先试试封百度 221.181.6.6  221.181.37.55 如果你能封主这两个IP那你就按这个封的方法自己封吧 IP和端口我绝对没找错 大家共享下吧 谁有UUSEE的发个来 谢谢

xgh5188

这个规则只是现在QQ直播的版本 最新官方的版本不知道其他版本能封不 大家测试下

xgh5188

这些是我找到的IP和端口 不知道以上的规则你们封住没 没封住就加这些进去试试

xgh5188

add chain=virus protocol=udp dst-port=6000-6004 action=drop comment="1234" \
    disabled=yes
add chain=virus protocol=udp dst-port=4002-4003 action=drop comment="" \
    disabled=yes
add chain=virus protocol=udp dst-port=13371 action=drop comment="" \
    disabled=yes
add chain=virus protocol=udp dst-port=28332-28333 action=drop comment="" \
    disabled=yes
add chain=virus dst-address=58.60.9.41 protocol=tcp dst-port=443 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=58.60.9.11 protocol=tcp dst-port=443 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=58.251.61.222 protocol=tcp dst-port=6500 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=58.60.9.22 protocol=udp dst-port=8000 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=61.157.124.107 protocol=tcp dst-port=80 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=121.14.74.208 protocol=tcp dst-port=80 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=121.14.100.66 protocol=tcp dst-port=8080 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=121.233.186.86 protocol=udp dst-port=13851 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=124.115.0.199 protocol=tcp dst-port=80 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=124.115.5.142 protocol=tcp dst-port=80 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=124.114.3.11 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=219.153.72.119 protocol=tcp dst-port=80 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=218.30.73.63 protocol=tcp dst-port=80 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=218.30.73.58 protocol=tcp dst-port=443 action=drop \
    comment="" disabled=yes
add chain=virus dst-address=202.102.56.57 protocol=tcp dst-port=443 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=202.102.57.52 protocol=udp dst-port=8000 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=116.30.163.252 protocol=udp dst-port=9839 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=116.230.42.41 protocol=udp dst-port=13417 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=220.178.242.66 protocol=udp dst-port=37113 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=61.155.88.34 protocol=udp action=drop comment="" \
    disabled=yes
add chain=virus dst-address=116.20.90.178 protocol=udp action=drop comment="" \
    disabled=yes
add chain=virus dst-address=117.27.42.115 protocol=udp dst-port=13858 \
    action=drop comment="" disabled=yes
add chain=virus dst-address=218.4.185.42 protocol=udp action=drop comment="" \
    disabled=yes
add chain=virus dst-address=220.180.129.142 protocol=udp action=drop \
    comment="" disabled=yes
add chain=virus dst-address=59.51.2.220 protocol=udp action=drop comment="" \
    disabled=yes

xgh5188

今天测试了下 可以把第一行删除掉13002-13999这行删除掉照样能封