防火墙配置

liyun

/ip firewall rule input add connection-state=invalid action=drop \

   comment="Drop invalid connection packets"

/ip firewall rule input add connection-state=established \

   comment="Allow established connections"

/ip firewall rule input add connection-state=related \

   comment="Allow related connections"

/ip firewall rule input add protocol=udp comment="Allow UDP"

/ip firewall rule input add protocol=icmp comment="Allow ICMP Ping"

/ip firewall rule input add src-address=192.168.0.0/24 \

   comment="From my home network"

/ip firewall rule input add action=drop log=yes \

   comment="Log and drop everything else"
配置防火墙:保护你的路由器
(可选)配置DHCP服务散发IP配置到你的家庭网络中去：
/ip pool add name=private ranges=192.168.0.2-192.168.0.254

/ip dhcp-server network add gateway=192.168.0.1 address=192.168.0.0/24 \

   dns-server=195.13.160.52,195.122.1.59 domain="mail.com"

/ip dhcp-server add name=home interface=ether2 lease-time=3h \

   address-pool=private   

/ip dhcp-server enable home