|
发表于 2005-4-10 10:51:05
|
显示全部楼层
/ system script add name="enable_conn" source="/ ip firewall rule input set \[/ip firewall \ rule input find comment=dropconn\] disabled=yes" \ policy=ftp,reboot,read,write,policy,test add name="disable_conn" source="/ ip firewall rule input set \[/ip firewall \ rule input find comment=dropconn\] disabled=no" \ policy=ftp,reboot,read,write,policy,test/ system scheduler add name="disableconn" on-event=disable_conn start-date=jan/01/1970 \ start-time=22:00:00 interval=1d comment="" disabled=no add name="enableconn" on-event=enable_conn start-date=jan/01/1970 \ start-time=10:00:00 interval=1d comment="" disabled=no/ ip firewall rule input add src-address=!192.168.1.49/32 action=drop comment="dropconn" disabled=yes这是我机子上的,早10点过后能上网,晚10后不能上网,我是通过定义防火墙来定义能否上网的,192.168.1.49是管理ip,在不能上网时使用这个ip的机器可以管理服务器并能上网,如有需要,你可把该ip的物理地址设成静态 |
|