找回密码
 注册

QQ登录

只需一步,快速开始

搜索
查看: 2445|回复: 2

[其它] 请问在做好ROS后,应该对ROS进行哪方面的安全设置呢?

[复制链接]
发表于 2008-9-2 16:45:01 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有账号?注册

×
我刚做好了ros.设置可以共享上网了.就做了ADSL拔号和NAT共享上网.这两个.

请问还要对ROS进行哪方面的安全设置呢..比如禁止ping入,之类的设置.

禁止ping入又在哪里设置呢..

希望有好心人帮我回答一下.谢谢......






.
routeros
发表于 2008-9-2 16:50:53 | 显示全部楼层
1,改账号 密码
2,设置账号的有效登陆方式和权限
3,防火墙
routeros
回复

使用道具 举报

发表于 2008-9-2 16:57:58 | 显示全部楼层
禁止“ICMP“就ping不通了
防止别人扫描可以参照
/ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="port scanners to list " disabled=no
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="nmap fin stealth scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="syn/fin scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="syn/rst scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="fin/psh/urg scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="all/all scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="nmap null scan"
/ip firewall filter add chain=input src-address-list="port scanners" action=drop comment="dropping port scanners" disabled=no
routeros
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|手机版|小黑屋|软路由 ( 渝ICP备15001194号-1|渝公网安备 50011602500124号 )

GMT+8, 2024-11-6 05:20 , Processed in 0.088261 second(s), 4 queries , Gzip On, Redis On.

Powered by Discuz! X3.5 Licensed

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表