1 頁 (共 1 頁)

RouteOS DNS DDOS

文章發表於 : 2012年 10月 15日, 10:40
super
代碼: 選擇全部
/ip firewall filter
add action=add-src-to-address-list address-list=_0_DDSN_DNS_50 address-list-timeout=3m chain=forward comment="DNS DDOS" disabled=no dst-port=53 protocol=udp src-address=!192.168.0.0/16 src-port=80
add action=add-src-to-address-list address-list=_0_DDSN_DNS_50 address-list-timeout=6w16h10m chain=forward connection-limit=100,32 disabled=no dst-port=53 protocol=udp src-address=!192.168.0.0/16
add action=drop chain=forward disabled=no dst-port=53 protocol=udp src-address-list=_0_DDSN_DNS_50