封闭端口和协议

ospace

在这里看了很多好文章,自己设了一下封闭端口和协议,大家来探讨一下.01.IP-->filter chains-->+   随便起名字(假设为closep)--->ok

ospace

02.IP-->filter rules  在右边选择栏内选择closep

ospace

03.把要封闭的端口和协议在Terminal用/import  *.rsc  命令导入.

ospace

/ ip firewall rule closep add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:25 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:69 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:113 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:113 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:123 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:134-139 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:134-139 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:161-162 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:161-162 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:445 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:445 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:500 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:500 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:1080 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:1092 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:1363-1364 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:1368 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:1373 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:1433-1434 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:1524 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:2535 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:2745 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:2745 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:2283 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:3127-3128 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3150 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3306 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3306 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3389 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3389 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3410 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:3801 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:4444 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:4444 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5000 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5000 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5354 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5354 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5554 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5800 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5800 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5900 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:5900 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:6267 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:7306-7308 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:7306-7308 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:7511 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:7511 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:7626 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:8225 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:8225 \    out-interface=all protocol=udp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:8866 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:9898 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:10000 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:10000 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:10080 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:12345-12346 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:12345-12346 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:17027 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:17027 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:17300 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:27374 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:27374 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:20168 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:20168 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:23444 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:23444 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:30100 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:31337-31338 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:31337-31338 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:31789-31790 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:31789-31790 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:34555 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:35555 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:39213 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:39213 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:45576 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:45576 out-interface=all protocol=udp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all \    dst-address=0.0.0.0/0:65506 out-interface=all protocol=tcp \    icmp-options=any:any tcp-options=any connection-state=any flow="" \    connection="" content="" src-mac-address=00:00:00:00:00:00 limit-count=0 \    limit-burst=0 limit-time=0s action=drop log=no comment="" disabled=no add src-address=0.0.0.0/0:0-65535 in-interface=all dst-address=0.0.0.0/0:23 \    out-interface=all protocol=tcp icmp-options=any:any tcp-options=any \    connection-state=any flow="" connection="" content="" \    src-mac-address=00:00:00:00:00:00 limit-count=0 limit-burst=0 \    limit-time=0s action=drop log=no comment="" disabled=no

ospace

04.在input,forward,output内都加上   选+-->Action   Action:jump   jump target:closep

ospace

05.在input内只加上内网管理winbox的IP,   最后一条全部DROP06.需要添加/更改新的端口和协议只要在closep内改

ospace

forward

ospace

output

netlea

支持楼主的发表!谢谢!

hzkane

QUOTE (ospace @ Apr 22 2005, 10:31 AM)
在这里看了很多好文章,自己设了一下封闭端口和协议,大家来探讨一下.01.IP-->filter chains-->+   随便起名字(假设为closep)--->ok  
  有?步，??，?可以根??些，做到其他的方面。嘿嘿

mywangba

强 这样方便多了

yuhe7919

Script file loaded successfullyERROR: input does not match any value of chain[admin@MikroTik] > 这是怎么回事啊？