ROS软路由常用脚本集合Word下载.docx

1、if（$a=up） do=:set i 1然后再在/tool netwatch里添加监控host=你要监控的ip在down里填写/system script run 你要监控的ipset shendown1 /system clock get dateset shendown2 /system clock get timeset shendown （你要监控的ip down . $shendown1 . . $shendown2）log warning $shendown ROS小包策略：/ ip firewall mangle add chain=forward protocol=tcp t

2、cp-flags=syn action=change-mss new-mss=1440 comment= disabled=no add chain=forwar* *2*=all-p2p action=mark-connection new-connection-mark=p2p_conn passthrough=yes comment=add chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p passthrough=yes comment=add chain=forward conne

3、ction-mark=!p2p_conn action=mark-packet new-packet-mark=general passthrough=yes comment=add chain=forward packet-size=32-512 action=mark-packet new-packet-mark=small passthrough=yes comment=add chain=forward packet-size=512-1200 action=mark-packet new-packet-mark=big/ queue tree add name=p2p1 parent

4、=wan packet-mark=p2p limit-at=600000 queue=default priority=8 max-limit=800000 burst-limit=0 burst-threshold=0 burst-time=0sp2p2 parent=lan packet-mark=p2p limit-at=800000 queue=default priority=8 max-limit=600000 burst-limit=0 burst-threshold=0 burst-time=0sClassA parent=lan packet-mark= limit-at=0

5、 queue=default priority=8 max-limit=100000000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no ClassB parent=ClassA packet-mark= priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0sLeaf1 parent=ClassA packet-mark=general limit-at=0 queue=default priority=7 max-limit=0 burst-

6、limit=0 burst-threshold=0 burst-time=0sLeaf2 parent=ClassB packet-mark=small limit-at=0 queue=default priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0sLeaf3 parent=ClassB packet-mark=big limit-at=0 queue=default priority=6 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0sR

7、OS封杀常用P2P策略脚本：/ ip firewall filteradd chain=input protocol=udp dst-port=137-138 action=drop comment=drop udp137-138# 讯雷add chain=forward protocol=tcp dst-port=3076-3079 action=drop comment=downTools Xunlei disabled=yes2楼add chain=forward dst-address=202.96.155.91/32 action=dropadd chain=forward dst-

8、address=210.22.12.53/32 action=dropadd chain=forward dst-address=61.128.198.97/32 action=drop# 电骡add chain=forward protocol=tcp dst-port=4661 action=drop comment=downP2P VeryCDadd chain=forward protocol=tcp dst-port=4662 action=dropadd chain=forward protocol=tcp dst-port=4242 action=dropadd chain=fo

9、rward dst-address=62.241.53.15/32 action=drop# 屁屁狗（PPGOU）add chain=forward protocol=tcp dst-port=8505 action=drop comment=downTools PPGOUadd chain=forward dst-address=219.153.0.152/32 action=dropadd chain=forward dst-address=61.145.116.186/32 action=drop# KUGO酷狗add chain=forward protocol=tcp dst-por

10、t=3318 action=drop comment=downMP3 KUGOadd chain=forward protocol=tcp dst-port=1043 action=drop disabled=yesadd chain=forward protocol=tcp dst-port=4224 action=drop disabled=yesadd chain=forward protocol=tcp dst-port=2371 action=drop disabled=yesadd chain=forward protocol=udp dst-port=7000 action=dr

11、op disabled=yesadd chain=forward dst-address=218.16.125.227/32 action=drop disabled=yesadd chain=forward dst-address=61.143.210.56/32 action=drop disabled=yesadd chain=forward dst-address=218.16.125.226/32 action=drop disabled=yesadd chain=forward dst-address=61.129.115.206/32 action=drop disabled=y

12、esadd chain=forward dst-address=61.145.114.33/32 action=drop disabled=yes# RF onlineadd chain=forward dst-address=218.30.85.16/32 dst-port=8888 action=accept comment=RF onlineadd chain=forward dst-address=59.34.215.133/32 dst-port=8888 action=acceptadd chain=forward dst-address=60.28.26.66/32 dst-po

13、rt=8888 action=accept# 比特精灵add chain=forward protocol=tcp dst-port=16881 action=drop comment=downP2P BitSpiritadd chain=forward protocol=tcp dst-port=6881-6890 action=dropadd chain=forward protocol=tcp dst-port=8881-8890 action=dropadd chain=forward protocol=udp dst-port=16881 action=dropadd chain=f

14、orward protocol=udp dst-port=6881-6890 action=dropadd chain=forward protocol=udp dst-port=8881-8890 action=drop# 宝酷add chain=forward protocol=tcp dst-port=6346 action=drop comment=downP2P BaoCueadd chain=forward protocol=tcp dst-port=11300 action=dropadd chain=forward dst-address=61.172.197.196/32 a

15、ction=dropadd chain=forward dst-address=218.1.14.3/32 action=dropadd chain=forward dst-address=218.1.14.4/32 action=dropadd chain=forward dst-address=218.1.14.9/32 action=dropadd chain=forward dst-address=61.172.197.209/32 action=dropadd chain=forward dst-address=61.172.197.197/32 action=dropadd cha

16、in=forward dst-address=218.1.14.5/32 action=dropadd chain=forward dst-address=218.5.72.118/32 action=drop# 百事通下载工具add chain=forward dst-address=61.145.126.150/32 action=drop comment=downP2P Bai*ong# XXMP3下载add chain=forward dst-address=202.108.156.206/32 action=drop comment=downMP3 BaiDuMP3# PTC下载工具

17、add chain=forward protocol=tcp dst-port=50007 action=drop comment=downP2P PTCdown# eDonkey2000下载工具add chain=forward protocol=tcp dst-port=4371 action=drop comment=downP2P eDonkey2000add chain=forward dst-address=62.241.53.17/32 action=drop# Poco2005add chain=forward protocol=udp src-port=8094 action

18、=drop comment=downP2P Poco2005add chain=forward protocol=tcp dst-port=2881 action=dropadd chain=forward protocol=tcp dst-port=5354 action=dropadd chain=forward dst-address=61.145.118.224/32 action=dropadd chain=forward dst-address=210.192.122.147/32 action=dropadd chain=forward dst-address=207.46.19

19、6.108/32 action=drop# 卡盟add chain=forward protocol=tcp dst-port=3751 action=drop comment=downP2P KAMUNadd chain=forward protocol=tcp dst-port=3753 action=dropadd chain=forward protocol=tcp dst-port=4772 action=dropadd chain=forward protocol=tcp dst-port=4774 action=dropadd chain=forward dst-address=

20、211.155.224.67/32 action=drop# 维宇RealLinkadd chain=forward dst-address=211.91.135.114/32 action=drop comment=downP2P RealLinkadd chain=forward dst-address=221.233.18.180/32 action=dropadd chain=forward dst-address=61.145.119.55/32 action=dropadd chain=forward dst-address=221.3.132.99/32 action=drop#

21、 百宝add chain=forward protocol=tcp dst-port=3468 action=drop comment=downP2P 100baoadd chain=forward dst-address=219.136.251.56/32 action=dropadd chain=forward dst-address=61.149.124.173/32 action=drop# 百花PPadd chain=forward protocol=tcp dst-port=5093 action=drop comment=downP2P BaiHuaadd chain=forwa

22、rd dst-address=221.229.241.243/32 action=drop# 快递通add chain=forward dst-address=202.96.137.56/32 action=drop comment=downP2P KDT# 酷乐add chain=forward protocol=tcp dst-port=6800-6801 action=drop comment=downMP3 Kuroadd chain=forward protocol=tcp dst-port=7003 action=dropadd chain=forward dst-address=

23、218.244.45.67/32 action=dropadd chain=forward dst-address=220.169.192.145/32 action=drop# XX下吧add chain=forward protocol=tcp dst-port=11000 action=drop comment=downP2P BaiDuXiaBaadd chain=forward dst-address=202.108.249.171/32 action=drop# 百兆P2Padd chain=forward protocol=tcp dst-port=9000 action=dro

24、p comment=downP2P baizhaoP2Padd chain=forward dst-address=221.233.19.30/32 action=drop# 石头（OPENEXT）add chain=forward protocol=tcp dst-port=5467 action=drop comment=downP2P OPENEXTadd chain=forward protocol=tcp dst-port=2500 action=dropadd chain=forward protocol=tcp dst-port=4173 action=dropadd chain

25、=forward protocol=tcp dst-port=10002 action=dropadd chain=forward protocol=tcp dst-port=10003 action=dropadd chain=forward dst-address=66.197.13.166/32 action=dropadd chain=forward dst-address=210.22.12.245/32 action=dropadd chain=forward dst-address=69.93.222.56/32 action=drop# iLink 1.1add chain=f

26、orward protocol=tcp dst-port=5000 action=drop comment=downP2P iLink# DDSadd chain=forward protocol=tcp dst-port=11608 action=drop comment=downP2P DDSadd chain=forward dst-address=210.51.168.13/32 action=dropadd chain=forward dst-address=211.157.105.252/32 action=dropadd chain=forward dst-address=212

27、.179.66.17/32 action=drop# iMesh 5add chain=forward protocol=tcp dst-port=4662 action=drop comment=downP2P iMesh 5add chain=forward dst-address=212.179.66.24/32 action=dropadd chain=forward dst-address=38.117.175.23/32 action=drop# winmxadd chain=forward protocol=tcp dst-port=5690 action=drop commen

28、t=downP2P winmxadd chain=forward dst-address=64.246.15.43/32 action=drop# 网酷add chain=forward protocol=tcp dst-port=2122 action=drop comment=downP2P netcooladd chain=forward dst-address=211.152.22.9/32 action=dropadd chain=forward dst-address=211.152.22.101/32 action=dropadd chain=forward dst-address=221.192.132.29/32 action=drop# PPlive网络电视add chain=forward protocol=tcp dst-port=8008 action=drop comment=P2PTV PPliveadd chain=forward protocol=udp dst-port=4004 action=drop# QQ直播add chain=forward protocol=udp dst-port=13002-13999 action=drop comment=P2PTV QQ disabled