測試的防火牆過濾規則如下:
/ ip firewall filter add chain=input connection-state=established comment="Accept established connections" add chain=input connection-state=related comment="Accept related connections" add chain=input connection-state=invalid action=drop comment="Drop invalid connections" add chain=input protocol=udp action=accept comment="UDP" disabled=no add chain=input protocol=icmp limit=50/5s,2 comment="Allow limited pings" add chain=input protocol=icmp action=drop comment="Drop excess pings" add chain=input in-interface=ether2 src-address=192.168.0.0/24 comment="From our LAN" action=accept add chain=input action=log log-prefix="DROP INPUT" comment="Log everything else" add chain=input action=drop comment="Drop everything else"
啟用防火牆閒置3小時後的Connections連線畫面內容
關閉防火牆閒置3小時後的Connections連線畫面內容
沒有留言:
張貼留言