/ ip firewall filter
add chain=forward protocol=tcp dst-port=135-139 action=drop comment="" \
disabled=no
add chain=forward protocol=tcp dst-port=82 action=drop \
comment="Worm.NetSky.Y@mm"
add chain=forward protocol=tcp dst-port=113 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-1"
add chain=forward protocol=tcp dst-port=2041 action=drop \
comment="W33.Korgo.A/B/C/D/E/F-2"
add chain=forward protocol=tcp dst-port=3067 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-3"
add chain=forward protocol=tcp dst-port=6667 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-4"
add chain=forward protocol=tcp dst-port=445 action=drop \
comment="W32.Korgo.A/B/C/D/E/F-5"
add chain=forward protocol=tcp dst-port=1000-1001 action=drop \
comment="Backdoor.Nibu.B-1"
add chain=forward protocol=tcp dst-port=2283 action=drop \
comment="Backdoor.Nibu.B-2"
add chain=forward protocol=tcp dst-port=3422 action=drop \
comment="Backdoor.IRC.Aladinz.R-1"
add chain=forward protocol=tcp dst-port=43958 action=drop \
comment="Backdoor.IRC.Aladinz.R-2"
add chain=forward protocol=tcp dst-port=5554 action=drop \
comment="W32.Dabber.A/B-1"
add chain=forward protocol=tcp dst-port=8967 action=drop \
comment="W32.Dabber.A/B-2"
add chain=forward protocol=tcp dst-port=6789 action=drop \
comment="Worm.NetSky.S/T/U@mm"
add chain=forward protocol=tcp dst-port=8787 action=drop \
comment="Back.Orifice.2000.Trojan-1"
add chain=forward protocol=tcp dst-port=8879 action=drop \
comment="Back.Orifice.2000.Trojan-2"
add chain=forward protocol=tcp dst-port=31666 action=drop \
comment="Back.Orifice.2000.Trojan-3"
add chain=forward protocol=tcp dst-port=31337-31338 action=drop \
comment="Back.Orifice.2000.Trojan-4"
add chain=forward protocol=tcp dst-port=54320-54321 action=drop \
comment="Back.Orifice.2000.Trojan-5"
add chain=forward protocol=tcp dst-port=12345-12346 action=drop \
comment="Block.NetBus.Trojan-1"
add chain=forward protocol=tcp dst-port=20034 action=drop \
comment="Block.NetBus.Trojan-2"
add chain=forward protocol=tcp dst-port=21554 action=drop \
comment="GirlFriend.Trojan-1"
add chain=forward protocol=tcp dst-port=41 action=drop \
comment="DeepThroat.Trojan-1"
add chain=forward protocol=tcp dst-port=3150 action=drop \
comment="DeepThroat.Trojan-2"
add chain=forward protocol=tcp dst-port=999 action=drop \
comment="DeepThroat.Trojan-3"
add chain=forward protocol=tcp dst-port=6670 action=drop \
comment="DeepThroat.Trojan-4"
add chain=forward protocol=tcp dst-port=6771 action=drop \
comment="DeepThroat.Trojan-5"
add chain=forward protocol=tcp dst-port=60000 action=drop \
comment="DeepThroat.Trojan-6"
add chain=forward protocol=tcp dst-port=2140 action=drop \
comment="DeepThroat.Trojan-7"
add chain=forward protocol=tcp dst-port=10067 action=drop \
comment="Portal.of.Doom.Trojan-1"
add chain=forward protocol=tcp dst-port=10167 action=drop \
comment="Portal.of.Doom.Trojan-2"
add chain=forward protocol=tcp dst-port=3700 action=drop \
comment="Portal.of.Doom.Trojan-3"
add chain=forward protocol=tcp dst-port=9872-9875 action=drop \
comment="Portal.of.Doom.Trojan-4"
add chain=forward protocol=tcp dst-port=6883 action=drop \
comment="Delta.Source.Trojan-1"
add chain=forward protocol=tcp dst-port=26274 action=drop \
comment="Delta.Source.Trojan-2"
add chain=forward protocol=tcp dst-port=4444 action=drop \
comment="Delta.Source.Trojan-3"
add chain=forward protocol=tcp dst-port=47262 action=drop \
comment="Delta.Source.Trojan-4"
add chain=forward protocol=tcp dst-port=3791 action=drop \
comment="Eclypse.Trojan-1"
add chain=forward protocol=tcp dst-port=3801 action=drop \
comment="Eclypse.Trojan-2"
add chain=forward protocol=tcp dst-port=65390 action=drop \
comment="Eclypse.Trojan-3"
add chain=forward protocol=tcp dst-port=5880-5882 action=drop \
comment="Y3K.RAT.Trojan-1"
add chain=forward protocol=tcp dst-port=5888-5889 action=drop \
comment="Y3K.RAT.Trojan-2"
add chain=forward protocol=tcp dst-port=30100-30103 action=drop \
comment="NetSphere.Trojan-1"
add chain=forward protocol=tcp dst-port=30133 action=drop \
comment="NetSphere.Trojan-2"
add chain=forward protocol=tcp dst-port=7300-7301 action=drop \
comment="NetMonitor.Trojan-1"
add chain=forward protocol=tcp dst-port=7306-7308 action=drop \
comment="NetMonitor.Trojan-2"
add chain=forward protocol=tcp dst-port=79 action=drop \
comment="FireHotcker.Trojan-1"
add chain=forward protocol=tcp dst-port=5031 action=drop \
comment="FireHotcker.Trojan-2"
add chain=forward protocol=tcp dst-port=5321 action=drop \
comment="FireHotcker.Trojan-3"
add chain=forward protocol=tcp dst-port=6400 action=drop \
comment="TheThing.Trojan-1"
add chain=forward protocol=tcp dst-port=1047 action=drop \
comment="GateCrasher.Trojan-1"
add chain=forward protocol=tcp dst-port=6969-6970 action=drop \
comment="GateCrasher.Trojan-2"
add chain=forward protocol=tcp dst-port=2774 action=drop comment="SubSeven-1" \
disabled=no
add chain=forward protocol=tcp dst-port=27374 action=drop comment="SubSeven-2" \
disabled=no
add chain=forward protocol=tcp dst-port=1243 action=drop comment="SubSeven-3" \
disabled=no
add chain=forward protocol=tcp dst-port=1234 action=drop comment="SubSeven-4" \
disabled=no
add chain=forward protocol=tcp dst-port=6711-6713 action=drop \
comment="SubSeven-5"
add chain=forward protocol=tcp dst-port=16959 action=drop comment="SubSeven-7" \
disabled=no
add chain=forward protocol=tcp dst-port=25685-25686 action=drop \
comment="Moonpie.Trojan-1"
add chain=forward protocol=tcp dst-port=25982 action=drop \
comment="Moonpie.Trojan-2"
add chain=forward protocol=tcp dst-port=1024-1030 action=drop \
comment="NetSpy.Trojan-1"
add chain=forward protocol=tcp dst-port=1033 action=drop \
comment="NetSpy.Trojan-2"
add chain=forward protocol=tcp dst-port=31337-31339 action=drop \
comment="NetSpy.Trojan-3"
add chain=forward protocol=tcp dst-port=8102 action=drop comment="Trojan" \
disabled=no
add chain=forward protocol=tcp dst-port=7306 action=drop \
comment="Netspy3.0Trojan"
add chain=forward protocol=tcp dst-port=8011 action=drop comment="WAY.Trojan" \
disabled=no
add chain=forward protocol=tcp dst-port=7626 action=drop \
comment="Trojan.BingHe"
add chain=forward protocol=tcp dst-port=19191 action=drop \
comment="Trojan.NianSeHoYian"
add chain=forward protocol=tcp dst-port=23444-23445 action=drop \
comment="NetBull.Trojan"
add chain=forward protocol=tcp dst-port=2583 action=drop \
comment="WinCrash.Trojan-1"
add chain=forward protocol=tcp dst-port=3024 action=drop \
comment="WinCrash.Trojan-2"
add chain=forward protocol=tcp dst-port=4092 action=drop \
comment="WinCrash.Trojan-3"
add chain=forward protocol=tcp dst-port=5714 action=drop \
comment="WinCrash.Trojan-4"
add chain=forward protocol=tcp dst-port=1010-1012 action=drop \
comment="Doly1.0/1.35/1.5trojan-1"
add chain=forward protocol=tcp dst-port=1015 action=drop \
comment="Doly1.0/1.35/1.5trojan-2"
add chain=forward protocol=tcp dst-port=9878 action=drop \
comment="TransScout.Trojan-2"
add chain=forward protocol=tcp dst-port=2773 action=drop \
comment="Backdoor.YAI..Trojan-1"
add chain=forward protocol=tcp dst-port=7215 action=drop \
comment="Backdoor.YAI.Trojan-2"
add chain=forward protocol=tcp dst-port=54283 action=drop \
comment="Backdoor.YAI.Trojan-3"
add chain=forward protocol=tcp dst-port=1003 action=drop \
comment="BackDoorTrojan-1"
add chain=forward protocol=tcp dst-port=5598 action=drop \
comment="BackDoorTrojan-2"
add chain=forward protocol=tcp dst-port=5698 action=drop \
comment="BackDoorTrojan-3"
add chain=forward protocol=tcp dst-port=2716 action=drop \
comment="PrayerTrojan-1"
add chain=forward protocol=tcp dst-port=9999 action=drop \
comment="PrayerTrojan-2"
add chain=forward protocol=tcp dst-port=21544 action=drop \
comment="SchwindlerTrojan-1"
add chain=forward protocol=tcp dst-port=31554 action=drop \
comment="SchwindlerTrojan-2"
add chain=forward protocol=tcp dst-port=18753 action=drop \
comment="Shaft.DDoS.Trojan-1"
add chain=forward protocol=tcp dst-port=20432 action=drop \
comment="Shaft.DDoS.Trojan-2"
add chain=forward protocol=tcp dst-port=65000 action=drop \
comment="Devil.DDoS.Trojan"
add chain=forward protocol=tcp dst-port=11831 action=drop \
comment="LatinusTrojan-1"
add chain=forward protocol=tcp dst-port=29559 action=drop \
comment="LatinusTrojan-2"
add chain=forward protocol=tcp dst-port=1784 action=drop \
comment="Snid.X2Trojan-1"
add chain=forward protocol=tcp dst-port=3586 action=drop \
comment="Snid.X2Trojan-2"
add chain=forward protocol=tcp dst-port=7609 action=drop \
comment="Snid.X2Trojan-3"
add chain=forward protocol=tcp dst-port=12348-12349 action=drop \
comment="BionetTrojan-1"
add chain=forward protocol=tcp dst-port=12478 action=drop \
comment="BionetTrojan-2"
add chain=forward protocol=tcp dst-port=57922 action=drop \
comment="BionetTrojan-3"
add chain=forward protocol=tcp dst-port=3127-3198 action=drop \
comment="Worm.Novarg.a.Mydoom.a.-1"
add chain=forward protocol=tcp dst-port=4444 action=drop \
comment="Worm.MsBlaster-1"
add chain=forward protocol=tcp dst-port=6777 action=drop \
comment="Worm.BBeagle.a.Bagle.a."
add chain=forward protocol=tcp dst-port=8866 action=drop \
comment="Worm.BBeagle.b"
add chain=forward protocol=tcp dst-port=2745 action=drop \
comment="Worm.BBeagle.c-g/j-l"
add chain=forward protocol=tcp dst-port=2556 action=drop \
comment="Worm.BBeagle.p/q/r/n"
add chain=forward protocol=tcp dst-port=20742 action=drop \
comment="Worm.BBEagle.m-2"
add chain=forward protocol=tcp dst-port=4751 action=drop \
comment="Worm.BBeagle.s/t/u/v"
add chain=forward protocol=tcp dst-port=2535 action=drop \
comment="Worm.BBeagle.aa/ab/w/x-z-2"
add chain=forward protocol=tcp dst-port=5238 action=drop \
comment="Worm.LovGate.r.RpcExploit"
add chain=forward protocol=tcp dst-port=1068 action=drop \
comment="Worm.Sasser.a"
add chain=forward protocol=tcp dst-port=5554 action=drop \
comment="Worm.Sasser.b/c/f"
add chain=forward protocol=tcp dst-port=9996 action=drop \
comment="Worm.Sasser.b/c/f"
add chain=forward protocol=tcp dst-port=9995 action=drop \
comment="Worm.Sasser.d"
add chain=forward protocol=tcp dst-port=10168 action=drop \
comment="Worm.Lovgate.a/b/c/d"
add chain=forward protocol=tcp dst-port=20808 action=drop \
comment="Worm.Lovgate.v.QQ"
add chain=forward protocol=tcp dst-port=1092 action=drop \
comment="Worm.Lovgate.f/g"
add chain=forward protocol=tcp dst-port=20168 action=drop \
comment="Worm.Lovgate.f/g"
add chain=forward protocol=tcp dst-port=593 action=drop comment=""
add chain=forward protocol=tcp dst-port=1214 action=drop comment="" \
disabled=no
add chain=forward protocol=tcp dst-port=1363-1364 action=drop \
comment="ndm.requester"
add chain=forward protocol=tcp dst-port=1368 action=drop comment="screen.cast" \
disabled=no
add chain=forward protocol=tcp dst-port=1373 action=drop comment="hromgrafx" \
disabled=no
add chain=forward protocol=tcp dst-port=1377 action=drop comment="cichlid" \
disabled=no
add chain=forward protocol=tcp dst-port=3410 action=drop \
comment="Backdoor.OptixPro"
add chain=forward protocol=udp dst-port=135-139 action=drop comment="" \
disabled=no
add chain=forward protocol=udp dst-port=8787 action=drop \
comment="Back.Orifice.2000.Trojan-6"
add chain=forward protocol=udp dst-port=8879 action=drop \
comment="Back.Orifice.2000.Trojan-7"
add chain=forward protocol=udp dst-port=31666 action=drop \
comment="Back.Orifice.2000.Trojan-8"
add chain=forward protocol=udp dst-port=31337-31338 action=drop \
comment="Back.Orifice.2000.Trojan-9"
add chain=forward protocol=udp dst-port=54320-54321 action=drop \
comment="Back.Orifice.2000.Trojan-10"
add chain=forward protocol=udp dst-port=12345-12346 action=drop \
comment="Block.NetBus.Trojan-3"
add chain=forward protocol=udp dst-port=20034 action=drop \
comment="Block.NetBus.Trojan-4"
add chain=forward protocol=udp dst-port=21554 action=drop \
comment="GirlFriend.Trojan-2"
add chain=forward protocol=udp dst-port=41 action=drop \
comment="DeepThroat.Trojan-8"
add chain=forward protocol=udp dst-port=3150 action=drop \
comment="DeepThroat.Trojan-9"
add chain=forward protocol=udp dst-port=999 action=drop \
comment="DeepThroat.Trojan-10"
add chain=forward protocol=udp dst-port=6670 action=drop \
comment="DeepThroat.Trojan-11"
add chain=forward protocol=udp dst-port=6771 action=drop \
comment="DeepThroat.Trojan-12"
add chain=forward protocol=udp dst-port=60000 action=drop \
comment="DeepThroat.Trojan-13"
add chain=forward protocol=udp dst-port=10067 action=drop \
comment="Portal.of.Doom.Trojan-5"
add chain=forward protocol=udp dst-port=10167 action=drop \
comment="Portal.of.Doom.Trojan-6"
add chain=forward protocol=udp dst-port=3700 action=drop \
comment="Portal.of.Doom.Trojan-7"
add chain=forward protocol=udp dst-port=9872-9875 action=drop \
comment="Portal.of.Doom.Trojan-8"
add chain=forward protocol=udp dst-port=6883 action=drop \
comment="Delta.Source.Trojan-5"
add chain=forward protocol=udp dst-port=26274 action=drop \
comment="Delta.Source.Trojan-6"
add chain=forward protocol=udp dst-port=44444 action=drop \
comment="Delta.Source.Trojan-7"
add chain=forward protocol=udp dst-port=47262 action=drop \
comment="Delta.Source.Trojan-8"
add chain=forward protocol=udp dst-port=3791 action=drop \
comment="Eclypse.Trojan-1"
add chain=forward protocol=udp dst-port=3801 action=drop \
comment="Eclypse.Trojan-2"
add chain=forward protocol=udp dst-port=5880-5882 action=drop \
comment="Eclypse.Trojan-3"
add chain=forward protocol=udp dst-port=5888-5889 action=drop \
comment="Eclypse.Trojan-4"
add chain=forward protocol=udp dst-port=34555 action=drop \
comment="Trin00.DDoS.Trojan-1"
add chain=forward protocol=udp dst-port=35555 action=drop \
comment="Trin00.DDoS.Trojan-2"
add chain=forward protocol=udp dst-port=31338 action=drop \
comment="NetSpy.DK.Trojan-1"
add chain=forward protocol=udp dst-port=69 action=drop \
comment="Worm.MsBlaster-2"
add chain=forward protocol=udp dst-port=123 action=drop \
comment="Worm.Sobig.f-1"
add chain=forward protocol=udp dst-port=995-999 action=drop \
comment="Worm.Sobig.f-2"
add chain=forward protocol=udp dst-port=8998 action=drop \
comment="Worm.Sobig.f-3"
沒有留言:
張貼留言