ros如何禁用防火墻
ros如何禁用防火墻
我的ros想禁用一下防火墻!用什么方法好呢?下面由學習啦小編給你做出詳細的ros禁用防火墻方法一介紹!希望對你有幫助!
ros禁用防火墻方法一:
用winbox登錄ROS
打開new terminal,把以下內(nèi)容粘貼上回車,注意以粘貼以前把192.168.0.2改成要封QQ的那臺電腦的IP
/ ip firewall filter
ad chain=forward src-address=192.168.0.2/32 pr tcp dst-po 8000 act drop
ad chain=forward src-address=192.168.0.2/32 pr udp dst-po 8000 act drop
add chain=forward src-address=192.168.0.2/32 dst-address=61.144.238.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=61.152.100.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=61.141.194.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=202.96.170.163/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=202.104.129.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=202.104.193.20/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=202.104.193.11/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=202.104.193.12/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=218.17.209.23/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=218.18.95.153/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=218.18.95.165/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=218.18.95.220/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=218.85.138.70/32 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=219.133.38.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=219.133.49.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 dst-address=220.133.40.0/24 action=drop
add chain=forward src-address=192.168.0.2/32 content=sz.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz2.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz3.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz4.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz5.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz6.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz7.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=sz8.tencent.com action=rejec
add chain=forward src-address=192.168.0.2/32 content=sz9.tencent.com action=rejec
add chain=forward src-address=192.168.0.2/32 content=tcpconn.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn2.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn3.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn4.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn5.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn6.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn7.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=tcpconn8.tencent.com action=reject
add chain=forward src-address=192.168.0.2/32 content=qq.com action=reject
add chain=forward src-address=192.168.0.2/32 content=www.qq.com action=reject
QQ服務(wù)器IP不斷增加中,發(fā)現(xiàn)還能登錄QQ,就要找到新的IP加上,用360安全衛(wèi)士或netstat都可以看到QQ連接的IP,照樣子再加上行了。
ros禁用防火墻方法二:
IP DROP掉
防火墻設(shè)置
/ ip firewall filter
add chain=forward src-address="0.0.0.0/0" action=drop comment="禁止網(wǎng)" disabled=no
0.0.0.0表示所IP
單 寫 192.168.1.X/32
或者 192.168.1.X-192.168.1.X
ros禁用防火墻方法三:
要禁止某用戶網(wǎng),直接pppSecrets,disable該用戶.先梆定該用戶網(wǎng)卡址.
要禁止某段IP,流設(shè)置
FireWall - Mamgle 已設(shè)wan口 屬性Src.Address 設(shè)置
看了“ros如何禁用防火墻 ”文章的還看了:
1.防火墻知識