[分享]routeros防火墙的设置方法

赤脚e神

专业限速

:for szwm from 1 to 254 do={/queue simple add name=(linmh . $szwm) dst-address=(172.30.81. . $szwm) limit-at=10240000/2560000 max-limit=10240000/2560000 interface=all parent=none priority=8 queue=default/default burst-limit=20480000/5120000 burst-threshold=10240000/2560000 burst-time=10s/10s  total-queue=default target-address=172.30.81.0/24 time=19h00m00s-24h00m00s,sun,mon,tue,wed,thu,fri,sat disabled=no}

小包端口透明传输

/ ip firewall mangle
add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1452 \
    comment="Change MSS" disabled=no
add chain=prerouting src-address=172.30.81.0/24 tos=min-delay \
    action=mark-packet new-packet-mark=LEVEL-1 passthrough=yes \
    comment="Up Number" disabled=no
add chain=prerouting src-address=172.30.81.0/24 tos=max-reliability \
    action=mark-packet new-packet-mark=LEVEL-2 passthrough=yes comment="" \
    disabled=no
add chain=prerouting src-address=172.30.81.0/24 tos=normal action=mark-packet \
    new-packet-mark=LEVEL-3 passthrough=yes comment="" disabled=no
/ queue tree
add name="YXJUP" parent=global-out packet-mark="" limit-at=0 \
    queue=default priority=3 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
add name="YXSJB" parent=YXJUP packet-mark="" limit-at=0 \
    queue=default priority=3 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
add name="NO1" parent=YXSJB packet-mark=LEVEL-1 limit-at=0 \
    queue=default priority=3 max-limit=0 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
add name="ZDYXSJB" parent=YXJUP packet-mark="" limit-at=0 \
    queue=default pri

zxcun

收藏，以后学习

tyyj

都封了？

cachelin

顶了，

ibmroot

iptables 不就可以
完成了 搞什么 route os

tianaililee

谢谢楼主，分享！！！ 这个防火墙的功能是否验证过

longwei123

封QQ   把UDP全封了  最简单   

qiqi00612

记号

sc002

刚来学习先~~~~~~~~~~~~

kkaaii

不错~~~~~~~~~~~~~~~~~~~~~~~~~~~`

郭伟网吧

266不明哦..怎样用防火墙?

apathy1986

见识了

marsaber

好帖子！

mjzm0769

那位大侠帮下忙，我从网上下的RouterOS 2.9.27     RouterOS 2.9.6都是安装后重启的时候到Uncompressing Linux... OK,booting the Kernel 不下去了，是怎么回事啊？是不是过期了，那位提供个可以用的，谢谢了,QQ:312558181  祝：好人一生平安

wwenyunkui

我是新来的，正要学习