Ros中如何禁止访问某个网站

aqqwe

ros中如何禁止访问某个网站。请各位高手教教我

tim97803

例如，可以加一条规则，禁止登陆新浪聊天室：
ip －》firewall －》filter fules ， 选择 forward
选择 ＋ 号，advanced 里面content 输上 chat.sina.com ,action里面选择return，即可
如果chat.sina.com 换成 ad4.sina.com.cn ,新浪主页的广告就没有了


防火墙封端口：
ICMP

UDP:20002 3010 1509 1099


TCP:135 139 445 4444 16881 8881 6346 5335 1433 1434

3306 56491 8820-8899 6820-6899

add dst-address=:135-139 protocol=tcp action=drop comment=\"Drop Blaster Worm\" \\
disabled=no
add dst-address=:135-139 protocol=udp action=drop comment=\"Drop Messenger \\
Worm\" disabled=no
add dst-address=:445 protocol=tcp action=drop comment=\"Drop Blaster Worm\" \\
disabled=no
add dst-address=:445 protocol=udp action=drop comment=\"Drop Blaster Worm\" \\
disabled=no
add dst-address=:593 protocol=tcp action=drop comment=\"________\" disabled=no
add dst-address=:1024-1030 protocol=tcp action=drop comment=\"________\" \\
disabled=no
add dst-address=:1080 protocol=tcp action=drop comment=\"Drop MyDoom\" \\
disabled=no
add dst-address=:1214 protocol=tcp action=drop comment=\"________\" disabled=no
add dst-address=:1363 protocol=tcp action=drop comment=\"ndm requester\" \\
disabled=no
add dst-address=:1364 protocol=tcp action=drop comment=\"ndm server\" \\
disabled=no
add dst-address=:1368 protocol=tcp action=drop comment=\"screen cast\" \\
disabled=no
add dst-address=:1373 protocol=tcp action=drop comment=\"hromgrafx\" \\
disabled=no
add dst-address=:1377 protocol=tcp action=drop comment=\"cichlid\" disabled=no
add dst-address=:1433-1434 protocol=tcp action=drop comment=\"Worm\" \\
disabled=no
add dst-address=:2745 protocol=tcp action=drop comment=\"Bagle Virus\" \\
disabled=no
add dst-address=:2283 protocol=tcp action=drop comment=\"Drop Dumaru.Y\" \\
disabled=no
add dst-address=:2535 protocol=tcp action=drop comment=\"Drop Beagle\" \\
disabled=no
add dst-address=:2745 protocol=tcp action=drop comment=\"Drop Beagle.C-K\" \\
disabled=no
add dst-address=:3127-3128 protocol=tcp action=drop comment=\"Drop MyDoom\" \\
disabled=no
add dst-address=:3410 protocol=tcp action=drop comment=\"Drop Backdoor \\
OptixPro\" disabled=no
add dst-address=:4444 protocol=tcp action=drop comment=\"Worm\" disabled=no
add dst-address=:4444 protocol=udp action=drop comment=\"Worm\" disabled=no
add dst-address=:5554 protocol=tcp action=drop comment=\"Drop Sasser\" \\
disabled=no
add dst-address=:8866 protocol=tcp action=drop comment=\"Drop Beagle.B\" \\
disabled=no
add dst-address=:9898 protocol=tcp action=drop comment=\"Drop Dabber.A-B\" \\
disabled=no
add dst-address=:10000 protocol=tcp action=drop comment=\"Drop Dumaru.Y\" \\
disabled=no
add dst-address=:10080 protocol=tcp action=drop comment=\"Drop MyDoom.B\" \\
disabled=no
add dst-address=:12345 protocol=tcp action=drop comment=\"Drop NetBus\" \\
disabled=no
add dst-address=:17300 protocol=tcp action=drop comment=\"Drop Kuang2\" \\
disabled=no
add dst-address=:27374 protocol=tcp action=drop comment=\"Drop SubSeven\" \\
disabled=no
add dst-address=:65506 protocol=tcp action=drop comment=\"Drop PhatBot, \\
Agobot, Gaobot\" disabled=no