找回密码
 注册

QQ登录

只需一步,快速开始

搜索
查看: 3985|回复: 9

[其它] 小弟的防火墙,与大家分享(自认为比较全,不全的指点一下)

[复制链接]
发表于 2005-10-25 15:18:01 | 显示全部楼层 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有账号?注册

×
/ ip firewall filter
ad ch input pr tcp dst-po 41 act drop comm DeepThroat.Trojan-1
ad ch input pr tcp dst-po 79 act drop comm FireHotcker.Trojan-1
ad ch input pr tcp dst-po 82 act drop comm Worm.NetSky.Y@mm
ad ch input pr tcp dst-po 113 act drop comm W32.Korgo.A/B/C/D/E/F-1
ad ch input pr tcp dst-po 134 act drop comm Drop Blaster Worm
ad ch input pr tcp dst-po 135-139 act drop comm Drop Messenger Worm
ad ch input pr tcp dst-po 143 act drop
ad ch input pr tcp dst-po 161-162 act drop comm snmp
ad ch input pr tcp dst-po 445 act drop comm W32.Korgo.A/B/C/D/E/F-5
ad ch input pr tcp dst-po 500 act drop comm drop ISAKMP
ad ch input pr tcp dst-po 593 act drop
ad ch input pr tcp dst-po 999 act drop comm DeepThroat.Trojan-3
ad ch input pr tcp dst-po 1000-1001 act drop comm Backdoor.Nibu.B-1
ad ch input pr tcp dst-po 1003 act drop comm BackDoorTrojan-1
ad ch input pr tcp dst-po 1010-1012 act drop comm Doly1.0/1.35/1.5trojan-1
ad ch input pr tcp dst-po 1015 act drop comm Doly1.0/1.35/1.5trojan-2
ad ch input pr tcp dst-po 1024-1030 act drop comm NetSpy.Trojan-1
ad ch input pr tcp dst-po 1033 act drop comm NetSpy.Trojan-2
ad ch input pr tcp dst-po 1047 act drop comm GateCrasher.Trojan-1
ad ch input pr tcp dst-po 1068 act drop comm Worm.Sasser.a
ad ch input pr tcp dst-po 1080 act drop comm Drop MyDoom
ad ch input pr tcp dst-po 1092 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 1214 act drop
ad ch input pr tcp dst-po 1243 act drop comm SubSeven-3
ad ch input pr tcp dst-po 1234 act drop comm SubSeven-4
ad ch input pr tcp dst-po 1363-1364 act drop comm ndm.requester
ad ch input pr tcp dst-po 1368 act drop comm screen.cast
ad ch input pr tcp dst-po 1373 act drop comm hromgrafx
ad ch input pr tcp dst-po 1377 act drop comm cichlid
ad ch input pr tcp dst-po 1524 act drop comm drop 1524 ingreslock 后门
ad ch input pr tcp dst-po 1784 act drop comm Snid.X2Trojan-1
ad ch input pr tcp dst-po 1999-2005 act drop comm TransScout.Trojan-1
ad ch input pr tcp dst-po 2041 act drop comm W33.Korgo.A/B/C/D/E/F-2
ad ch input pr tcp dst-po 2140 act drop comm DeepThroat.Trojan-7
ad ch input pr tcp dst-po 2283 act drop comm Backdoor.Nibu.B-2
ad ch input pr tcp dst-po 2535 act drop comm Worm.BBeagle.aa/ab/w/x-z-2
ad ch input pr tcp dst-po 2556 act drop comm Worm.BBeagle.p/q/r/n
ad ch input pr tcp dst-po 2583 act drop comm WinCrash.Trojan-1
ad ch input pr tcp dst-po 2716 act drop comm PrayerTrojan-1
ad ch input pr tcp dst-po 2745 act drop comm Worm.BBeagle.c-g/j-l
ad ch input pr tcp dst-po 2773 act drop comm Backdoor.YAI..Trojan-1
ad ch input pr tcp dst-po 2774 act drop comm SubSeven-1
ad ch input pr tcp dst-po 3024 act drop comm WinCrash.Trojan-2
ad ch input pr tcp dst-po 3067 act drop comm W32.Korgo.A/B/C/D/E/F-3
ad ch input pr tcp dst-po 3127-3198 act drop comm Worm.Novarg.a.Mydoom.a.-1
ad ch input pr tcp dst-po 3150 act drop comm DeepThroat.Trojan-2
ad ch input pr tcp dst-po 3306 act drop comm Drop Sub3306
ad ch input pr tcp dst-po 3410 act drop comm Backdoor.OptixPro
ad ch input pr tcp dst-po 3422 act drop comm Backdoor.IRC.Aladinz.R-1
ad ch input pr tcp dst-po 3586 act drop comm Snid.X2Trojan-2
ad ch input pr tcp dst-po 3700 act drop comm Portal.of.Doom.Trojan-3
ad ch input pr tcp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr tcp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr tcp dst-po 4092 act drop comm WinCrash.Trojan-3
ad ch input pr tcp dst-po 4444 act drop comm Delta.Source.Trojan-3
ad ch input pr tcp dst-po 4444 act drop comm Worm.MsBlaster-1
ad ch input pr tcp dst-po 4751 act drop comm Worm.BBeagle.s/t/u/v
ad ch input pr tcp dst-po 5000 act drop comm 蠕虫"Kibuv.B"与"Bobax5000
ad ch input pr tcp dst-po 5031 act drop comm FireHotcker.Trojan-2
ad ch input pr tcp dst-po 5238 act drop comm Worm.LovGate.r.RpcExploit
ad ch input pr tcp dst-po 5321 act drop comm FireHotcker.Trojan-3
ad ch input pr tcp dst-po 5554 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 5554 act drop comm W32.Dabber.A/B-1
ad ch input pr tcp dst-po 5598 act drop comm BackDoorTrojan-2
ad ch input pr tcp dst-po 5698 act drop comm BackDoorTrojan-3
ad ch input pr tcp dst-po 5714 act drop comm WinCrash.Trojan-4
ad ch input pr tcp dst-po 5800 act drop comm rule 8 deny tcp \destination-port eq
ad ch input pr tcp dst-po 5880-5882 act drop comm Y3K.RAT.Trojan-1
ad ch input pr tcp dst-po 5888-5889 act drop comm Y3K.RAT.Trojan-2
ad ch input pr tcp dst-po 5900 act drop comm rule 8 deny tcp \destination-port eq         TCP&UDP        5900
ad ch input pr tcp dst-po 6267 act drop comm 广外女生
ad ch input pr tcp dst-po 6400 act drop comm TheThing.Trojan-1
ad ch input pr tcp dst-po 6667 act drop comm W32.Korgo.A/B/C/D/E/F-4
ad ch input pr tcp dst-po 6670 act drop comm DeepThroat.Trojan-4
ad ch input pr tcp dst-po 6711-6713 act drop comm SubSeven-5
ad ch input pr tcp dst-po 6771 act drop comm DeepThroat.Trojan-5
ad ch input pr tcp dst-po 6777 act drop comm Worm.BBeagle.a.Bagle.a.
ad ch input pr tcp dst-po 6789 act drop comm Worm.NetSky.S/T/U@mm
ad ch input pr tcp dst-po 6969-6970 act drop comm GateCrasher.Trojan-2
ad ch input pr tcp dst-po 7215 act drop comm Backdoor.YAI.Trojan-2
ad ch input pr tcp dst-po 7300-7301 act drop comm NetMonitor.Trojan-1
ad ch input pr tcp dst-po 7306-7308 act drop comm NetMonitor.Trojan-2
ad ch input pr tcp dst-po 7306 act drop comm Netspy3.0Trojan
ad ch input pr tcp dst-po 7511 act drop comm 聪明基因
ad ch input pr tcp dst-po 7609 act drop comm Snid.X2Trojan-3
ad ch input pr tcp dst-po 7626 act drop comm Trojan.BingHe
ad ch input pr tcp dst-po 7777 act drop comm TheThing.Trojan-2
ad ch input pr tcp dst-po 8011 act drop comm WAY.Trojan
ad ch input pr tcp dst-po 8102 act drop comm Trojan
ad ch input pr tcp dst-po 8225 act drop comm 灰鸽子8225
ad ch input pr tcp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-1
ad ch input pr tcp dst-po 8866 act drop comm Worm.BBeagle.b
ad ch input pr tcp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-2
ad ch input pr tcp dst-po 8967 act drop comm W32.Dabber.A/B-2
ad ch input pr tcp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-4
ad ch input pr tcp dst-po 9878 act drop comm TransScout.Trojan-2
ad ch input pr tcp dst-po 9898-9999 act drop comm W32.Dabber.A/B-3
ad ch input pr tcp dst-po 9995 act drop comm Worm.Sasser.d
ad ch input pr tcp dst-po 9996 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 9999 act drop comm PrayerTrojan-2
ad ch input pr tcp dst-po 10000 act drop comm Backdoor.Nibu.E/G/H
ad ch input pr tcp dst-po 10067 act drop comm Portal.of.Doom.Trojan-1
ad ch input pr tcp dst-po 10167 act drop comm Portal.of.Doom.Trojan-2
ad ch input pr tcp dst-po 10168 act drop comm Worm.Lovgate.a/b/c/d
ad ch input pr tcp dst-po 11000 act drop comm Senna.Spy.Trojan-1
ad ch input pr tcp dst-po 11831 act drop comm LatinusTrojan-1
ad ch input pr tcp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-1
ad ch input pr tcp dst-po 12348-12349 act drop comm BionetTrojan-1
ad ch input pr tcp dst-po 12478 act drop comm BionetTrojan-2
ad ch input pr tcp dst-po 13000 act drop comm Senna.Spy.Trojan-2
ad ch input pr tcp dst-po 16959 act drop comm SubSeven-7
ad ch input pr tcp dst-po 17027 act drop comm drop 17027 这是一个外向连接
ad ch input pr tcp dst-po 17300 act drop comm Drop Kuang2
ad ch input pr tcp dst-po 18753 act drop comm Shaft.DDoS.Trojan-1
ad ch input pr tcp dst-po 19191 act drop comm Trojan.NianSeHoYian
ad ch input pr tcp dst-po 20034 act drop comm Block.NetBus.Trojan-2
ad ch input pr tcp dst-po 20168 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 20432 act drop comm Shaft.DDoS.Trojan-2
ad ch input pr tcp dst-po 20742 act drop comm Worm.BBEagle.m-2
ad ch input pr tcp dst-po 20808 act drop comm Worm.Lovgate.v.QQ
ad ch input pr tcp dst-po 21544 act drop comm SchwindlerTrojan-1
ad ch input pr tcp dst-po 21554 act drop comm GirlFriend.Trojan-1
ad ch input pr tcp dst-po 23444-23445 act drop comm NetBull.Trojan
ad ch input pr tcp dst-po 25685-25686 act drop comm Moonpie.Trojan-1
ad ch input pr tcp dst-po 25982 act drop comm Moonpie.Trojan-2
ad ch input pr tcp dst-po 26274 act drop comm Delta.Source.Trojan-2
ad ch input pr tcp dst-po 27374 act drop comm SubSeven-2
ad ch input pr tcp dst-po 29559 act drop comm LatinusTrojan-2
ad ch input pr tcp dst-po 30100-30103 act drop comm NetSphere.Trojan-1
ad ch input pr tcp dst-po 30133 act drop comm NetSphere.Trojan-2
ad ch input pr tcp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-4
ad ch input pr tcp dst-po 31337-31339 act drop comm NetSpy.Trojan-3
ad ch input pr tcp dst-po 31554 act drop comm SchwindlerTrojan-2
ad ch input pr tcp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-3
ad ch input pr tcp dst-po 31789-31790 act drop comm 31789 Hack-a-tac远程访问木马31789端口是控制连接,31790端口是文件传输连接
ad ch input pr tcp dst-po 34555 act drop comm Trin00  (DDoS)
ad ch input pr tcp dst-po 39213 act drop comm Drop Sasser冲击波
ad ch input pr tcp dst-po 43958 act drop comm Backdoor.IRC.Aladinz.R-2
ad ch input pr tcp dst-po 47262 act drop comm Delta.Source.Trojan-4
ad ch input pr tcp dst-po 54283 act drop comm Backdoor.YAI.Trojan-3
ad ch input pr tcp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-5
ad ch input pr tcp dst-po 57922 act drop comm BionetTrojan-3
ad ch input pr tcp dst-po 60000 act drop comm DeepThroat.Trojan-6
ad ch input pr tcp dst-po 65390 act drop comm Eclypse.Trojan-3
ad ch input pr tcp dst-po 65000 act drop comm Devil.DDoS.Trojan

ad ch input pr udp dst-po 41 act drop comm DeepThroat.Trojan-8
ad ch input pr udp dst-po 69 act drop comm Worm.MsBlaster-2
ad ch input pr udp dst-po 123 act drop comm Worm.Sobig.f-1
ad ch input pr udp dst-po 135-139 act drop
ad ch input pr udp dst-po 995-999 act drop comm Worm.Sobig.f-2
ad ch input pr udp dst-po 999 act drop comm DeepThroat.Trojan-10
ad ch input pr udp dst-po 3150 act drop comm DeepThroat.Trojan-9
ad ch input pr udp dst-po 3700 act drop comm Portal.of.Doom.Trojan-7
ad ch input pr udp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr udp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr udp dst-po 5880-5882 act drop comm Eclypse.Trojan-3
ad ch input pr udp dst-po 5888-5889 act drop comm Eclypse.Trojan-4
ad ch input pr udp dst-po 5900 act drop comm rule 8 deny tcp \destination-port eq         TCP&UDP        5900
ad ch input pr udp dst-po 6670 act drop comm DeepThroat.Trojan-11
ad ch input pr udp dst-po 6771 act drop comm DeepThroat.Trojan-12
ad ch input pr udp dst-po 6883 act drop comm Delta.Source.Trojan-5
ad ch input pr udp dst-po 7511 act drop comm 聪明基因
ad ch input pr udp dst-po 8225 act drop comm 灰鸽子8225
ad ch input pr udp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-6
ad ch input pr udp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-7
ad ch input pr udp dst-po 8998 act drop comm Worm.Sobig.f-3
ad ch input pr udp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-8
ad ch input pr udp dst-po 10067 act drop comm Portal.of.Doom.Trojan-5
ad ch input pr udp dst-po 10167 act drop comm Portal.of.Doom.Trojan-6
ad ch input pr udp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-3
ad ch input pr udp dst-po 17027 act drop comm drop 17027 这是一个外向连接
ad ch input pr udp dst-po 20034 act drop comm Block.NetBus.Trojan-4
ad ch input pr udp dst-po 21554 act drop comm GirlFriend.Trojan-2
ad ch input pr udp dst-po 26274 act drop comm Delta.Source.Trojan-6
ad ch input pr udp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-9
ad ch input pr udp dst-po 31338 act drop comm NetSpy.DK.Trojan-1
ad ch input pr udp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-8
ad ch input pr udp dst-po 31789-31790 act drop comm 31789 Hack-a-tac远程访问木马31789端口是控制连接,31790端口是文件传输连接
ad ch input pr udp dst-po 34555 act drop comm Trin00.DDoS.Trojan-1
ad ch input pr udp dst-po 35555 act drop comm Trin00.DDoS.Trojan-2
ad ch input pr udp dst-po 39213 act drop comm Drop Sasser冲击波
ad ch input pr udp dst-po 44444 act drop comm Delta.Source.Trojan-7
ad ch input pr udp dst-po 45576 act drop comm 代理软件的控制端口
ad ch input pr udp dst-po 47262 act drop comm Delta.Source.Trojan-8
ad ch input pr udp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-10
ad ch input pr udp dst-po 60000 act drop comm DeepThroat.Trojan-13
routeros
发表于 2005-10-25 15:56:33 | 显示全部楼层
整这么多好玩么?不让TCP进来不就得了~~
routeros
回复

使用道具 举报

 楼主| 发表于 2005-10-25 16:03:31 | 显示全部楼层
我也想呀,要是没有病毒了,没也就不用这样了。
这位大虾的内网没有病毒,要么就你的服务起太强,再多的病毒也承受的起哈
小弟太菜,只有用这么笨的办法,如果你有什么高招可以大家分享一下三!
routeros
回复

使用道具 举报

发表于 2005-10-25 16:05:01 | 显示全部楼层
QQ多少?
routeros
回复

使用道具 举报

 楼主| 发表于 2005-10-25 16:09:01 | 显示全部楼层
404673139
routeros
回复

使用道具 举报

发表于 2005-10-25 16:10:24 | 显示全部楼层
我内网只开有用到的端口,其它都deny掉~~
routeros
回复

使用道具 举报

 楼主| 发表于 2005-10-25 16:16:57 | 显示全部楼层
呵呵,是个不错的方法,但是我想你的内网的人太少,或你的内往的客户要求太底了哈,
如果新的软件或游戏出来怎么办呢,你不可能整天都到网上去收集相关信息三。
即便是这样,我想也不比设置这个简单吧
routeros
回复

使用道具 举报

发表于 2005-10-25 16:24:20 | 显示全部楼层
小兄弟,告诉你吧,我内网近500台机器,域管理+WSUS+网络杀毒,客户端有N多领导使用,什么股票呀,联众啊多的是。。。

我不认为你这个是最好的解决办法。。。(个人意见,仅供参考)
routeros
回复

使用道具 举报

发表于 2005-10-25 16:25:36 | 显示全部楼层
原帖由 naboo 于 2005-10-25 16:24 发表
小兄弟,告诉你吧,我内网近500台机器,域管理+WSUS+网络杀毒,客户端有N多领导使用,什么股票呀,联众啊多的是。。。

我不认为你这个是最好的解决办法。。。(个人意见,仅供参考)


有什么好的建议~
routeros
回复

使用道具 举报

 楼主| 发表于 2005-10-25 16:33:21 | 显示全部楼层
我原来是单位上的哟,要是我是单位上的,也那么做了,可上我是学校了的,我下面有1000多人,我不知道他们想玩什么,也知道他们用的什么软件,我只好用这种方法了,没有办法呀,他们不用什么扫描软件,我就谢天谢地了,
     哎,还是你们单位上的网管幸福呀!
routeros
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|手机版|小黑屋|软路由 ( 渝ICP备15001194号-1|渝公网安备 50011602500124号 )

GMT+8, 2024-11-24 10:08 , Processed in 0.064578 second(s), 5 queries , Gzip On, Redis On.

Powered by Discuz! X3.5 Licensed

© 2001-2024 Discuz! Team.

快速回复 返回顶部 返回列表