Router OS Prot ban~

gb43254

请问 怎么封锁prot,就是不给人家访问我的端口

bow

/ ip firewall rule input
add dst-address=:500 protocol=udp action=drop comment="" disabled=no
    disabled=no
add tcp-options=non-syn-only connection-state=established action=accept comment="Accept \
    established connections" disabled=no
add connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
add connection-state=related action=accept comment="Accept related connections" \
    disabled=no
add action=jump jump-target=virus comment="!!! Check for well-known viruses !!!" \
    disabled=no
add protocol=udp action=accept comment="UDP" disabled=no
add protocol=icmp action=drop comment="Drop excess pings" disabled=no
add src-address=192.168.1.0/24 dst-address=:22 protocol=tcp action=accept comment="SSH for  purposes"     disabled=no
add src-address=192.168.1.0/24 dst-address=:3987 protocol=tcp action=accept comment="winbox for  purposes"     disabled=no
add src-address=192.168.1.0/24 dst-address=:80 protocol=tcp action=accept comment="" disabled=no
add action=drop comment="Log and drop everything else" disabled=no