add name=stop ranges=20.20.20.0/24
/ip firewall filter
add action=drop chain=forward comment=\
"\B9\FD\C2\CB\B5\BD\C6\DA\D3\C3\BB\A7\C9\CF\CD\F8" disabled=no dst-port=\
!80-84 protocol=tcp src-address=20.20.20.0/24
add action=drop chain=forward comment=\
"\B9\FD\C2\CB\B5\BD\C6\DA\D3\C3\BB\A7\C9\CF\CD\F8" disabled=no dst-port=\
!53 protocol=udp src-address=20.20.20.0/24
/ip firewall mangle
add action=add-src-to-address-list address-list=XbtAuto_allow \
address-list-timeout=10h chain=prerouting comment=\
"\CC\E1\C7\B0\CD\A8\D6\AA" disabled=no dst-port=20189 protocol=tcp \
src-address-list=XbtAuto_expired
add action=accept chain=prerouting comment="\CC\E1\C7\B0\CD\A8\D6\AA" \
disabled=no dst-port=80 protocol=tcp src-address-list=XbtAuto_expired
add action=add-src-to-address-list address-list=XbtTs_allow \
address-list-timeout=23h chain=prerouting comment=\
"\CD\C6\CB\CD\CD\A8\D6\AA" disabled=no dst-port=20188 protocol=tcp \
src-address-list="\D4\DA\CF\DF"
add action=accept chain=prerouting comment="\CD\C6\CB\CD\CD\A8\D6\AA" \
disabled=no dst-port=80 protocol=tcp src-address-list="\D4\DA\CF\DF"
add action=add-src-to-address-list address-list="\D4\DA\CF\DF" \
address-list-timeout=10m chain=prerouting comment="\C6\F4\D3\C3\CD\C6\CB\
\CD\A3\A8\B2\BB\CD\C6\CB\CD\CA\B1\BD\FB\D3\C3\A3\A9" disabled=yes \
src-address-list=local
add action=accept chain=prerouting comment=\
"\D4\CA\D0\ED\BC\C6\B7\D1\B7\FE\CE\F1\C6\F7\CD\A8\B9\FD\C2\B7\D3\C9" \
disabled=no dst-address=192.168.9.222
/ip firewall nat
add action=redirect chain=dstnat comment="\BC\C6\B7\D1\B7\FE\CE\F1\C6\F7IP" \
disabled=no dst-address=192.168.9.222 dst-port=82,81 protocol=tcp \
to-ports=9000
add action=accept chain=dstnat comment="\CC\E1\C7\B0\CD\A8\D6\AA\CC\F8\B9\FD" \
disabled=no dst-port=80 protocol=tcp src-address-list=XbtAuto_allow
add action=dst-nat chain=dstnat comment="\CC\E1\C7\B0\CD\A8\D6\AA" disabled=\
no dst-address=!192.168.9.222 dst-port=80 protocol=tcp src-address-list=\
XbtAuto_expired to-addresses=192.168.9.222 to-ports=81
add action=accept chain=dstnat comment="\CD\C6\CB\CD\CD\A8\D6\AA\CC\F8\B9\FD" \
disabled=no dst-port=80 protocol=tcp src-address-list=XbtTs_allow
add action=dst-nat chain=dstnat comment="\CD\C6\CB\CD\CD\A8\D6\AA" disabled=\
no dst-address=!192.168.9.222 dst-port=80 protocol=tcp src-address-list=\
"\D4\DA\CF\DF" to-addresses=192.168.9.222 to-ports=83
add action=dst-nat chain=dstnat comment="\B5\BD\C6\DA\CC\E1\D0\D1" disabled=\
no dst-address=!192.168.9.222 dst-port=80 protocol=tcp src-address=\
20.20.20.0/24 to-addresses=192.168.9.222 to-ports=82
add action=masquerade chain=srcnat comment="" disabled=no
提前几天:o 不靠谱吧,正常的情况下可联网时间也会有倒计时。。
页:
[1]