PXIN
发表于 2005-2-28 19:13:08
在自己公司测试是可以封的,希望大家发扬共享精神帮忙把没有的QQ服务器地址贴出来add content=.tencent action=drop comment="tencent" disabled=no add content=.qq action=drop comment="qq" disabled=no add dst-address=61.135.131.240/32 action=drop comment="QQ" disabled=no add dst-address=61.141.194.203/32 action=drop comment="" disabled=no add dst-address=61.144.238.137/32 action=drop comment="" disabled=no add dst-address=61.144.238.145/32 action=drop comment="" disabled=no add dst-address=61.144.238.146/32 action=drop comment="" disabled=no add dst-address=61.144.238.150/32 action=drop comment="" disabled=no add dst-address=61.144.238.156/32 action=drop comment="" disabled=no add dst-address=202.96.170.175/32 action=drop comment="" disabled=no add dst-address=202.96.170.188/32 action=drop comment="" disabled=no add dst-address=202.103.149.40/32 action=drop comment="" disabled=no add dst-address=202.103.190.61/32 action=drop comment="" disabled=no add dst-address=202.104.129.246/32 action=drop comment="" disabled=no add dst-address=202.104.129.251/32 action=drop comment="" disabled=no add dst-address=202.104.129.252/32 action=drop comment="" disabled=no add dst-address=202.104.129.253/32 action=drop comment="" disabled=no add dst-address=202.104.129.254/32 action=drop comment="" disabled=no add dst-address=216.239.33.99/32 action=drop comment="" disabled=no add dst-address=218.17.209.23/32 action=drop comment="" disabled=no add dst-address=218.17.209.42/32 action=drop comment="" disabled=no add dst-address=218.18.95.140/32 action=drop comment="" disabled=no add dst-address=218.18.95.153/32 action=drop comment="" disabled=no add dst-address=218.18.95.165/32 action=drop comment="" disabled=no add dst-address=218.75.59.10/32 action=drop comment="" disabled=no add dst-address=218.85.138.69/32 action=drop comment="" disabled=no add dst-address=221.2.227.10/32 action=drop comment="" disabled=no add dst-address=221.2.227.130/32 action=drop comment="" disabled=no add dst-address=:8000-8009 protocol=tcp action=drop comment="" disabled=no add dst-address=:8000-8009 protocol=udp action=drop comment="" disabled=no add dst-address=:4000-4009 protocol=tcp action=drop comment="" disabled=no add dst-address=:4000-4009 protocol=udp action=drop comment="" disabled=no针对用ROS的proxy和socks上网的机器管用,若用pppoe或直连的机器再用代理上QQ就没法,只好先封代理网站了,所以公司网络想封彻底封QQ还是用proxy比较好,另外有人说直接封443SLL认证可以封,的确可以,但会导致一些网站不能正常登陆,不可取.
中意
发表于 2005-3-2 16:43:11
add content=.tencent action=drop comment="tencent" disabled=no add content=.qq action=drop comment="qq" disabled=no 我这里一用这两条之后 会影响网络速度
PXIN
发表于 2005-3-2 21:23:16
QUOTE (中意 @ Mar 2 2005, 04:43 PM)
add content=.tencent action=drop comment="tencent" disabled=no add content=.qq action=drop comment="qq" disabled=no 我这里一用这两条之后 会影响网络速度
这两条挡关键字,In Interface选内网网卡.
页:
[1]