防火墙2008
若有问题还请高手指教ftp上传 /importxxx.rsc/ip firewall filter
add chain=virus protocol=udp dst-port=555 action=drop\
comment="W木马PhAse1.0、Stealth Spy、IniKiller" disabled=no
add chain=virus protocol=udp dst-port=666 action= drop \
comment="木马Attack FTP、Satanz Backdoor"disabled=no
add chain=virus protocol=udp dst-port=456 action= drop \
comment="木马HACKERS PARADISE"disabled=no
add chain=virus protocol=udp dst-port=1001 action= drop \
comment="木马Silencer，WebEx"disabled=no
add chain=virus protocol=udp dst-port=1011 action= drop \
comment="木马Doly"disabled=no
add chain=virus protocol=udp dst-port=1024 action= drop \
comment="动态端口的开始,木马yai"disabled=no
add chain=virus protocol=udp dst-port=1070 action= drop \
comment="木马Psyber Stream，Streaming Audio"disabled=no
add chain=virus protocol=udp dst-port=1600 action= drop \
comment="木马Shivka-Burka" disabled=no
add chain=virus protocol=udp dst-port=1807 action= drop \
comment="木马SpySender"disabled=no
add chain=virus protocol=udp dst-port=1900 action= drop \
comment="可被利用ddos攻击，一般关闭" disabled=no
add chain=virus protocol=udp dst-port=1981 action= drop \
comment="木马ShockRave"disabled=no
add chain=virus protocol=udp dst-port=1999 action= drop \
comment="木马BackDoor,yai"disabled=no
add chain=virus protocol=udp dst-port=2000 action= drop \
comment="木马GirlFriend 1.3、Millenium 1.0"disabled=no
add chain=virus protocol=udp dst-port=2001 action= drop \
comment="木马Millenium 1.0、Trojan Cow,黑洞2001"disabled=no
add chain=virus protocol=udp dst-port=2023 action= drop \
comment="木马Pass Ripper"disabled=no
add chain=virus protocol=udp dst-port=2115 action= drop \
comment="木马Bugs"disabled=no
add chain=virus protocol=udp dst-port=2140 action= drop \
comment="木马Deep Throat 1.0/3.0，The Invasor"disabled=no
add chain=virus protocol=udp dst-port=2565 action= drop \
comment="木马Striker" disabled=no
add chain=virus protocol=udp dst-port=2583 action= drop \
comment="木马Wincrash 2.0"disabled=no
add chain=virus protocol=udp dst-port=2801 action= drop \
comment="木马Phineas Phucker"disabled=no
add chain=virus protocol=udp dst-port=3024 action= drop \
comment="木马WinCrash"disabled=no
add chain=virus protocol=udp dst-port=3129 action= drop \
comment="木马Master Paradise"disabled=no
add chain=virus protocol=udp dst-port=3150 action= drop \
comment="木马The Invasor,deep throat" disabled=no
add chain=virus protocol=udp dst-port=3210 action= drop \
comment="木马SchoolBus"disabled=no
add chain=virus protocol=udp dst-port=3333 action= drop \
comment="木马Prosiak"disabled=no
add chain=virus protocol=udp dst-port=3700 action= drop \
comment="木马Portal of Doom"disabled=no
add chain=virus protocol=udp dst-port=3996 action= drop \
comment="木马RemoteAnything"disabled=no
add chain=virus protocol=udp dst-port=40603 action= drop \
comment="木马RemoteAnything"disabled=no
add chain=virus protocol=udp dst-port=4092 action= drop \
comment="木马WinCrash此"disabled=no
add chain=virus protocol=udp dst-port=1234 action= drop \
comment="木马SubSeven2.0、Ultors Trojan"disabled=no
add chain=virus protocol=udp dst-port=1243 action= drop \
comment="木马SubSeven1.0/1.9"disabled=no
add chain=virus protocol=udp dst-port=1245 action= drop \
comment="W木马Vodoo，GabanBus，NetBus，Vodoo"disabled=no
add chain=virus protocol=udp dst-port=1492 action= drop \
comment="木马FTP99CMP"disabled=no
add chain=virus protocol=udp dst-port=1509 action= drop \
comment="木马Psyber Streaming Server"disabled=no
add chain=virus protocol=udp dst-port=1524 action= drop \
comment="许多攻击脚本安装一个后门SHELL于这个端"disabled=no
add chain=virus protocol=udp dst-port=4590 action= drop \
comment="木马ICQTrojan"disabled=no
add chain=virus protocol=udp dst-port=4950 action= drop \
comment="木马IcqTrojan5000端口"disabled=no
add chain=virus protocol=udp dst-port=5000 action= drop \
comment="木马blazer5，Sockets de Troie5000端口" disabled=no
add chain=virus protocol=udp dst-port=5001 action= drop \
comment="木马Sockets de Troie5001端口"disabled=no
add chain=virus protocol=udp dst-port=5321 action= drop \
comment="木马Sockets de Troie5321端口"disabled=no
add chain=virus protocol=udp dst-port=5400-5402 action= drop \
comment="木马Blade Runner"disabled=no
add chain=virus protocol=udp dst-port=5550 action= drop \
comment="木马xtcp"disabled=no
add chain=virus protocol=udp dst-port=5569 action= drop \
comment="木马Robo-Hack"disabled=no
add chain=virus protocol=udp dst-port=5742 action= drop \
comment="木马WinCrash1.03"disabled=no
add chain=virus protocol=udp dst-port=6267 action= drop \
comment="木马广外女生"disabled=no
add chain=virus protocol=udp dst-port=6400 action= drop \
comment="木马The tHing"disabled=no
add chain=virus protocol=udp dst-port=6670-6671 action= drop \
comment="木马Deep Throat"disabled=no
add chain=virus protocol=udp dst-port=6883 action= drop \
comment="木马DeltaSource"disabled=no
add chain=virus protocol=udp dst-port=6939 action= drop \
comment="木马Indoctrination"disabled=no
add chain=virus protocol=udp dst-port=6969 action= drop \
comment="木马Gatecrasher、Priority"disabled=no
add chain=virus protocol=udp dst-port=7300-7301 action= drop \
comment="木马NetMonitor"disabled=no
add chain=virus protocol=udp dst-port=7306-7308 action= drop \
comment="木马NetMonitor，NetSpy1.0"disabled=no
add chain=virus protocol=udp dst-port=7511 action= drop \
comment="木马聪明基因"disabled=no
add chain=virus protocol=udp dst-port=7597 action= drop \
comment="木马Quaz"disabled=no
add chain=virus protocol=udp dst-port=7626 action= drop \
comment="木马冰河"disabled=no
add chain=virus protocol=udp dst-port=7676 action= drop \
comment="木马Giscier"disabled=no
add chain=virus protocol=udp dst-port=8011 action= drop \
comment="木马way2.4"disabled=no
add chain=virus protocol=udp dst-port=8225 action= drop \
comment="木马灰鸽子"disabled=no
add chain=virus protocol=udp dst-port=8311 action= drop \
comment="木马初恋情人"disabled=no
add chain=virus protocol=udp dst-port=9400-9402 action= drop \
comment="木马Incommand 1.0"disabled=no
add chain=virus protocol=udp dst-port=9872-9875 action= drop \
comment="木马Portal of Doom"disabled=no
add chain=virus protocol=udp dst-port=9899 action= drop \
comment="木马InIkiller"disabled=no
add chain=virus protocol=udp dst-port=9989 action= drop \
comment="木马iNi-Killer"disabled=no
add chain=virus protocol=udp dst-port=10067 action= drop \
comment="木马iNi-Killer"disabled=no
add chain=virus protocol=udp dst-port=10167 action= drop \
comment="木马iNi-Killer"disabled=no
add chain=virus protocol=udp dst-port=11000 action= drop \
comment="木马SennaSpy"disabled=no
add chain=virus protocol=udp dst-port=11233 action= drop \
comment="木马Progenic trojan"disabled=no
add chain=virus protocol=udp dst-port=12076 action= drop \
comment="木马Telecommando"disabled=no
add chain=virus protocol=udp dst-port=12223 action= drop \
comment="木马Hack'99 KeyLogger"disabled=no
add chain=virus protocol=udp dst-port=12345-12346 action= drop \
comment="木马NetBus1.60/1.70、GabanBus"disabled=no
add chain=virus protocol=udp dst-port=12361 action= drop \
comment="木马Whack-a-mole"disabled=no
add chain=virus protocol=udp dst-port=16969 action= drop \
comment="木马Priority"disabled=no
add chain=virus protocol=udp dst-port=19191 action= drop \
comment="木马蓝色火焰"disabled=no
add chain=virus protocol=udp dst-port=20000-20001 action= drop \
comment="木马Millennium"disabled=no
add chain=virus protocol=udp dst-port=20034 action= drop \
comment="木马NetBus Pro"disabled=no
add chain=virus protocol=udp dst-port=21154 action= drop \
comment="木马GirlFriend"disabled=no
add chain=virus protocol=udp dst-port=22222 action= drop \
comment="木马Prosiak"disabled=no
add chain=virus protocol=udp dst-port=23444 action= drop \
comment="木马网络公牛"disabled=no
add chain=virus protocol=udp dst-port=23456 action= drop \
comment="木马Evil FTP、Ugly FTP"disabled=no
add chain=virus protocol=udp dst-port=26274 action= drop \
comment="木马Delta"disabled=no
add chain=virus protocol=udp dst-port=27374 action= drop \
comment="木马Subseven 2.1"disabled=no
add chain=virus protocol=udp dst-port=30100 action= drop \
comment="木马NetSphere"disabled=no
add chain=virus protocol=udp dst-port=30129 action= drop \
comment="木马Masters Paradise"disabled=no
add chain=virus protocol=udp dst-port=30303 action= drop \
comment="木马Socket23"disabled=no
add chain=virus protocol=udp dst-port=30999 action= drop \
comment="木马Kuang"disabled=no
add chain=virus protocol=udp dst-port=31337-31339 \
action= drop comment="木马BO"disabled=no
add chain=virus protocol=udp dst-port=31666 action= drop \
comment="木马BOWhack"disabled=no
add chain=virus protocol=udp dst-port=31789 action= drop \
comment="Hack-a-tack"disabled=no
add chain=virus protocol=udp dst-port=33333 action= drop \
comment="木马Prosiak"disabled=no
add chain=virus protocol=udp dst-port=34324 action= drop \
comment="木马Tiny Telnet Server、BigGluck、TN"disabled=no
add chain=virus protocol=udp dst-port=40412 action= drop \
comment="木马The Spy"disabled=no
add chain=virus protocol=udp dst-port=40421-40423 action= drop \
comment="木马Masters Paradise"disabled=no
add chain=virus protocol=udp dst-port=40426 action= drop \
comment="木马Masters Paradise"disabled=no
add chain=virus protocol=udp dst-port=43210 action= drop \
comment="木马SchoolBus 1.0/2.0"disabled=no
add chain=virus protocol=udp dst-port=44445 action= drop \
comment="木马Happypig"disabled=no
add chain=virus protocol=udp dst-port=47262 action= drop \
comment="木马Delta"disabled=no
add chain=virus protocol=udp dst-port=50505 action= drop \
comment="木马Sockets de Troie"disabled=no
add chain=virus protocol=udp dst-port=50766 action= drop \
comment="木马Fore"disabled=no
add chain=virus protocol=udp dst-port=53001 action= drop \
comment="木马Remote Windows Shutdown"disabled=no
add chain=virus protocol=udp dst-port=54320 action= drop \
comment="木马bo2000"disabled=no
add chain=virus protocol=udp dst-port=54321 action= drop \
comment="木马SchoolBus 1.0/2.0"disabled=no
add chain=virus protocol=udp dst-port=61466 action= drop \
comment="木马Telecommando"disabled=no
add chain=virus protocol=udp dst-port=65000 action= drop \
comment="木马Devil 1.03" disabled=no / ip firewall filter
add chain=input connection-state=invalid action=drop \
comment="丢弃非法连接数据" disabled=no
add chain=input protocol=tcp dst-port=80 connection-limit=20,0 action=drop \
comment="限制总http连接数为20" disabled=no
add chain=input protocol=tcp psd=21,3s,3,1 action=drop \
comment="探测并丢弃端口扫描连接" disabled=no
add chain=input protocol=tcp connection-limit=3,32 src-address-list=black_list \
action=tarpit comment="压制DoS攻击" disabled=no
add chain=input protocol=tcp connection-limit=10,32 \
action=add-src-to-address-list address-list=black_list \
address-list-timeout=1d comment="探测DoS攻击" disabled=no
add chain=input dst-address-type=!local action=drop comment="丢弃掉非本地数据" \
disabled=no
add chain=input protocol=icmp action=jump jump-target=ICMP \
comment="跳转到ICMP链表" disabled=no
add chain=ICMP protocol=icmp icmp-options=0:0-255 limit=5,5 action=accept \
comment="Ping应答限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:3 limit=5,5 action=accept \
comment="Traceroute限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=3:4 limit=5,5 action=accept \
comment="MTU线路探测限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=8:0-255 limit=5,5 action=accept \
comment="Ping请求限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp icmp-options=11:0-255 limit=5,5 action=accept \
comment="Trace TTL限制为每秒5个包" disabled=no
add chain=ICMP protocol=icmp action=drop comment="丢弃掉任何ICMP数据" \
disabled=no
add chain=forward connection-state=invalid action=drop \
comment="丢弃非法数据包" disabled=no
add chain=forward protocol=tcp connection-limit=80,32 action=drop \
comment="限制每个主机TCP连接数为80条" disabled=no
add chain=forward src-address-type=!unicast action=drop \
comment="丢弃掉所有非单播数据" disabled=no
add chain=forward content=.exe action=drop comment="禁止.exe文件通过" \
disabled=yes
add chain=forward content=.dll action=drop comment="禁止.dll文件通过" \
disabled=yes
add chain=forward protocol=icmp action=jump jump-target=ICMP \
comment="跳转到ICMP链表" disabled=no
add chain=forward action=jump jump-target=virus comment="跳转到病毒链表" \
disabled=no
add chain=virus protocol=tcp dst-port=41 action=drop \
comment="DeepThroat.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=82 action=drop \
comment="Worm.NetSky.Y@mm" disabled=no
add chain=virus protocol=tcp dst-port=113 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-1" disabled=no
add chain=virus protocol=tcp dst-port=2041 action=drop \
comment="W33.Korgo.A/B/C/D/E/F-2" disabled=no
add chain=virus protocol=tcp dst-port=3150 action=drop \
comment="DeepThroat.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3067 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-3" disabled=no
add chain=virus protocol=tcp dst-port=3422 action=drop \
comment="Backdoor.IRC.Aladdinz.R-1" disabled=no
add chain=virus protocol=tcp dst-port=6667 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-4" disabled=no
add chain=virus protocol=tcp dst-port=6789 action=drop \
comment="Worm.NetSky.S/T/U@mm" disabled=no
add chain=virus protocol=tcp dst-port=8787 action=drop \
comment="Back.Orifice.2000.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=8879 action=drop \
comment="Back.Orifice.2000.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=8967 action=drop \
comment="W32.Dabber.A/B-2" disabled=no
add chain=virus protocol=tcp dst-port=9999 action=drop \
comment="W32.Dabber.A/B-3" disabled=no
add chain=virus protocol=tcp dst-port=20034 action=drop \
comment="Block.NetBus.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=21554 action=drop \
comment="GirlFriend.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=31666 action=drop \
comment="Back.Orifice.2000.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=43958 action=drop \
comment="Backdoor.IRC.Aladdinz.R-2" disabled=no
add chain=virus protocol=tcp dst-port=999 action=drop \
comment="DeepThroat.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6670 action=drop \
comment="DeepThroat.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6771 action=drop \
comment="DeepThroat.Trojan-5" disabled=no
add chain=virus protocol=tcp dst-port=60000 action=drop \
comment="DeepThroat.Trojan-6" disabled=no
add chain=virus protocol=tcp dst-port=2140 action=drop \
comment="DeepThroat.Trojan-7" disabled=no
add chain=virus protocol=tcp dst-port=10067 action=drop \
comment="Portal.of.Doom.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=10167 action=drop \
comment="Portal.of.Doom.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=3700 action=drop \
comment="Portal.of.Doom.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=9872-9875 action=drop \
comment="Portal.of.Doom.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=6883 action=drop \
comment="Delta.Source.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=26274 action=drop \
comment="Delta.Source.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop \
comment="Delta.Source.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=47262 action=drop \
comment="Delta.Source.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=3791 action=drop \
comment="Eclypse.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3801 action=drop \
comment="Eclypse.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65390 action=drop \
comment="Eclypse.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5880-5882 action=drop \
comment="Y3K.RAT.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5888-5889 action=drop \
comment="Y3K.RAT.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=30100-30103 action=drop \
comment="NetSphere.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=30133 action=drop \
comment="NetSphere.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7300-7301 action=drop \
comment="NetMonitor.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7306-7308 action=drop \
comment="NetMonitor.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=79 action=drop \
comment="FireHotcker.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5031 action=drop \
comment="FireHotcker.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5321 action=drop \
comment="FireHotcker.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=6400 action=drop \
comment="TheThing.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7777 action=drop \
comment="TheThing.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1047 action=drop \
comment="GateCrasher.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=6969-6970 action=drop \
comment="GateCrasher.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2774 action=drop comment="SubSeven-1" \
disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment="SubSeven-2" \
disabled=no
add chain=virus protocol=tcp dst-port=1243 action=drop comment="SubSeven-3" \
disabled=no
add chain=virus protocol=tcp dst-port=1234 action=drop comment="SubSeven-4" \
disabled=no
add chain=virus protocol=tcp dst-port=6711-6713 action=drop \
comment="SubSeven-5" disabled=no
add chain=virus protocol=tcp dst-port=16959 action=drop comment="SubSeven-7" \
disabled=no
add chain=virus protocol=tcp dst-port=25685-25686 action=drop \
comment="Moonpie.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=25982 action=drop \
comment="Moonpie.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=31337-31339 action=drop \
comment="NetSpy.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=8102 action=drop comment="Trojan" \
disabled=no
add chain=virus protocol=tcp dst-port=8011 action=drop comment="WAY.Trojan" \
disabled=no
add chain=virus protocol=tcp dst-port=7626 action=drop comment="Trojan.BingHe" \
disabled=no
add chain=virus protocol=tcp dst-port=19191 action=drop \
comment="Trojan.NianSeHoYian" disabled=no
add chain=virus protocol=tcp dst-port=23444-23445 action=drop \
comment="NetBull.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=2583 action=drop \
comment="WinCrash.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3024 action=drop \
comment="WinCrash.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=4092 action=drop \
comment="WinCrash.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=5714 action=drop \
comment="WinCrash.Trojan-4" disabled=no
add chain=virus protocol=tcp dst-port=1010-1012 action=drop \
comment="Doly1.0/1.35/1.5trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=1015 action=drop \
comment="Doly1.0/1.35/1.5trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2004-2005 action=drop \
comment="TransScout.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=9878 action=drop \
comment="TransScout.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=2773 action=drop \
comment="Backdoor.YAI..Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=7215 action=drop \
comment="Backdoor.YAI.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=54283 action=drop \
comment="Backdoor.YAI.Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=1003 action=drop \
comment="BackDoorTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=5598 action=drop \
comment="BackDoorTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=5698 action=drop \
comment="BackDoorTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=31554 action=drop \
comment="SchainwindlerTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=18753 action=drop \
comment="Shaft.DDoS.Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=20432 action=drop \
comment="Shaft.DDoS.Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=65000 action=drop \
comment="Devil.DDoS.Trojan" disabled=no
add chain=virus protocol=tcp dst-port=11831 action=drop \
comment="LatinusTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=29559 action=drop \
comment="LatinusTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=1784 action=drop \
comment="Snid.X2Trojan-1" disabled=no
add chain=virus protocol=tcp dst-port=3586 action=drop \
comment="Snid.X2Trojan-2" disabled=no
add chain=virus protocol=tcp dst-port=7609 action=drop \
comment="Snid.X2Trojan-3" disabled=no
add chain=virus protocol=tcp dst-port=12348-12349 action=drop \
comment="BionetTrojan-1" disabled=no
add chain=virus protocol=tcp dst-port=12478 action=drop \
comment="BionetTrojan-2" disabled=no
add chain=virus protocol=tcp dst-port=57922 action=drop \
comment="BionetTrojan-3" disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop \
comment="Worm.Novarg.a.Mydoom.a1." disabled=no
add chain=virus protocol=tcp dst-port=6777 action=drop \
comment="Worm.BBeagle.a.Bagle.a." disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop \
comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop \
comment="Worm.BBeagle.c-g/j-l" disabled=no
add chain=virus protocol=tcp dst-port=2556 action=drop \
comment="Worm.BBeagle.p/q/r/n" disabled=no
add chain=virus protocol=tcp dst-port=20742 action=drop \
comment="Worm.BBEagle.m-2" disabled=no
add chain=virus protocol=tcp dst-port=4751 action=drop \
comment="Worm.BBeagle.s/t/u/v" disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop \
comment="Worm.BBeagle.aa/ab/w/x-z-2" disabled=no
add chain=virus protocol=tcp dst-port=5238 action=drop \
comment="Worm.LovGate.r.RpcExploit" disabled=no
add chain=virus protocol=tcp dst-port=1068 action=drop comment="Worm.Sasser.a" \
disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop \
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9996 action=drop \
comment="Worm.Sasser.b/c/f" disabled=no
add chain=virus protocol=tcp dst-port=9995 action=drop comment="Worm.Sasser.d" \
disabled=no
add chain=virus protocol=tcp dst-port=10168 action=drop \
comment="Worm.Lovgate.a/b/c/d" disabled=no
add chain=virus protocol=tcp dst-port=20808 action=drop \
comment="Worm.Lovgate.v.QQ" disabled=no
add chain=virus protocol=tcp dst-port=1092 action=drop \
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=20168 action=drop \
comment="Worm.Lovgate.f/g" disabled=no
add chain=virus protocol=tcp dst-port=1363-1364 action=drop \
comment="ndm.requester" disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen.cast" \
disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx" \
disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichainlid" \
disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop \
comment="Backdoor.Optixprotocol" disabled=no
add chain=virus protocol=tcp dst-port=8888 action=drop \
comment="Worm.BBeagle.b" disabled=no
add chain=virus protocol=udp dst-port=44444 action=drop \
comment="Delta.Source.Trojan-7" disabled=no
add chain=virus protocol=udp dst-port=8998 action=drop \
comment="Worm.Sobig.f-3" disabled=no
add chain=virus protocol=udp dst-port=123 action=drop comment="Worm.Sobig.f-1" \
disabled=no
add chain=virus protocol=tcp dst-port=3198 action=drop \
comment="Worm.Novarg.a.Mydoom.a2." disabled=no
add chain=virus protocol=tcp dst-port=139 action=drop comment="Drop Blaster \
Worm" disabled=no
add chain=virus protocol=tcp dst-port=135 action=drop comment="Drop Blaster \
Worm" disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster \
Worm" disabled=no
add chain=forward action=accept comment="接受所有数据" disabled=no
借个位置存档
页:
[1]