ROS软路由常用脚本集合.docx

1、ROS软路由常用脚本集合ROS软路由常用脚本集合 转载自：创意安天论坛看完请指出错误 以及自己感想 如果自己有什么好的想法不妨说出来RouterOS监控脚本，断线报警，线路恢复自动解除报警：在/system script里添加脚本name=你要监控的ip内容如下:set i 0:while ($i=0) do=:beep length=2s frequency=2755;:delay 5;:set a abc;:foreach i in=/tool netwatch find host=你要监控的ip do=:set a /tool netwatch get $i status;:put $a

2、;:if($a=up) do=:set i 1然后再在/tool netwatch里添加监控host=你要监控的ip在down里填写/system script run 你要监控的ip:set shendown1 /system clock get date:set shendown2 /system clock get time:set shendown (你要监控的ip down . $shendown1 . . $shendown2):log warning $shendown ROS小包策略：/ ip firewall mangle add chain=forward protocol

3、=tcp tcp-flags=syn action=change-mss new-mss=1440 comment= disabled=no add chain=forwar* *2*=all-p2p action=mark-connection new-connection-mark=p2p_conn passthrough=yes comment= disabled=no add chain=forward connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p passthrough=yes comment= dis

4、abled=no add chain=forward connection-mark=!p2p_conn action=mark-packet new-packet-mark=general passthrough=yes comment= disabled=no add chain=forward packet-size=32-512 action=mark-packet new-packet-mark=small passthrough=yes comment= disabled=no add chain=forward packet-size=512-1200 action=mark-p

5、acket new-packet-mark=big passthrough=yes comment= disabled=no / queue tree add name=p2p1 parent=wan packet-mark=p2p limit-at=600000 queue=default priority=8 max-limit=800000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=p2p2 parent=lan packet-mark=p2p limit-at=800000 queue=defa

6、ult priority=8 max-limit=600000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=ClassA parent=lan packet-mark= limit-at=0 queue=default priority=8 max-limit=100000000 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=ClassB parent=ClassA packet-mark= limit-at=0 qu

7、eue=default priority=8 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=Leaf1 parent=ClassA packet-mark=general limit-at=0 queue=default priority=7 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=Leaf2 parent=ClassB packet-mark=small limit

8、-at=0 queue=default priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no add name=Leaf3 parent=ClassB packet-mark=big limit-at=0 queue=default priority=6 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no ROS封杀常用P2P策略脚本：/ ip firewall filteradd chain=inp

9、ut protocol=udp dst-port=137-138 action=drop comment=drop udp137-138# 讯雷add chain=forward protocol=tcp dst-port=3076-3079 action=drop comment=downTools Xunlei disabled=yes2楼add chain=forward dst-address=202.96.155.91/32 action=dropadd chain=forward dst-address=210.22.12.53/32 action=dropadd chain=fo

10、rward dst-address=61.128.198.97/32 action=drop# 电骡add chain=forward protocol=tcp dst-port=4661 action=drop comment=downP2P VeryCDadd chain=forward protocol=tcp dst-port=4662 action=dropadd chain=forward protocol=tcp dst-port=4242 action=dropadd chain=forward dst-address=62.241.53.15/32 action=drop#

11、屁屁狗(PPGOU)add chain=forward protocol=tcp dst-port=8505 action=drop comment=downTools PPGOUadd chain=forward dst-address=219.153.0.152/32 action=dropadd chain=forward dst-address=61.145.116.186/32 action=drop# KUGO酷狗add chain=forward protocol=tcp dst-port=3318 action=drop comment=downMP3 KUGO disable

12、d=yesadd chain=forward protocol=tcp dst-port=1043 action=drop disabled=yesadd chain=forward protocol=tcp dst-port=4224 action=drop disabled=yesadd chain=forward protocol=tcp dst-port=2371 action=drop disabled=yesadd chain=forward protocol=udp dst-port=7000 action=drop disabled=yesadd chain=forward d

13、st-address=218.16.125.227/32 action=drop disabled=yesadd chain=forward dst-address=61.143.210.56/32 action=drop disabled=yesadd chain=forward dst-address=218.16.125.226/32 action=drop disabled=yesadd chain=forward dst-address=61.129.115.206/32 action=drop disabled=yesadd chain=forward dst-address=61

14、.145.114.33/32 action=drop disabled=yes# RF onlineadd chain=forward dst-address=218.30.85.16/32 dst-port=8888 action=accept comment=RF onlineadd chain=forward dst-address=59.34.215.133/32 dst-port=8888 action=acceptadd chain=forward dst-address=60.28.26.66/32 dst-port=8888 action=accept# 比特精灵add cha

15、in=forward protocol=tcp dst-port=16881 action=drop comment=downP2P BitSpiritadd chain=forward protocol=tcp dst-port=6881-6890 action=dropadd chain=forward protocol=tcp dst-port=8881-8890 action=dropadd chain=forward protocol=udp dst-port=16881 action=dropadd chain=forward protocol=udp dst-port=6881-

16、6890 action=dropadd chain=forward protocol=udp dst-port=8881-8890 action=drop# 宝酷add chain=forward protocol=tcp dst-port=6346 action=drop comment=downP2P BaoCueadd chain=forward protocol=tcp dst-port=11300 action=dropadd chain=forward dst-address=61.172.197.196/32 action=dropadd chain=forward dst-ad

17、dress=218.1.14.3/32 action=dropadd chain=forward dst-address=218.1.14.4/32 action=dropadd chain=forward dst-address=218.1.14.9/32 action=dropadd chain=forward dst-address=61.172.197.209/32 action=dropadd chain=forward dst-address=61.172.197.197/32 action=dropadd chain=forward dst-address=218.1.14.5/

18、32 action=dropadd chain=forward dst-address=218.5.72.118/32 action=dropadd chain=forward dst-address=61.172.197.196/32 action=drop# 百事通下载工具add chain=forward dst-address=61.145.126.150/32 action=drop comment=downP2P Bai*ong# XXMP3下载add chain=forward dst-address=202.108.156.206/32 action=drop comment=

19、downMP3 BaiDuMP3 disabled=yes# PTC下载工具add chain=forward protocol=tcp dst-port=50007 action=drop comment=downP2P PTCdown# eDonkey2000下载工具add chain=forward protocol=tcp dst-port=4371 action=drop comment=downP2P eDonkey2000add chain=forward protocol=tcp dst-port=4662 action=dropadd chain=forward dst-ad

20、dress=62.241.53.15/32 action=dropadd chain=forward dst-address=62.241.53.17/32 action=drop# Poco2005add chain=forward protocol=udp src-port=8094 action=drop comment=downP2P Poco2005add chain=forward protocol=tcp dst-port=2881 action=dropadd chain=forward protocol=tcp dst-port=5354 action=dropadd cha

21、in=forward dst-address=61.145.118.224/32 action=dropadd chain=forward dst-address=210.192.122.147/32 action=dropadd chain=forward dst-address=207.46.196.108/32 action=drop# 卡盟add chain=forward protocol=tcp dst-port=3751 action=drop comment=downP2P KAMUNadd chain=forward protocol=tcp dst-port=3753 ac

22、tion=dropadd chain=forward protocol=tcp dst-port=4772 action=dropadd chain=forward protocol=tcp dst-port=4774 action=dropadd chain=forward dst-address=211.155.224.67/32 action=drop# 维宇RealLinkadd chain=forward dst-address=211.91.135.114/32 action=drop comment=downP2P RealLinkadd chain=forward dst-ad

23、dress=221.233.18.180/32 action=dropadd chain=forward dst-address=61.145.119.55/32 action=dropadd chain=forward dst-address=221.3.132.99/32 action=drop# 百宝add chain=forward protocol=tcp dst-port=3468 action=drop comment=downP2P 100baoadd chain=forward dst-address=219.136.251.56/32 action=dropadd chai

24、n=forward dst-address=61.149.124.173/32 action=drop# 百花PPadd chain=forward protocol=tcp dst-port=5093 action=drop comment=downP2P BaiHuaadd chain=forward dst-address=221.229.241.243/32 action=drop# 快递通add chain=forward dst-address=202.96.137.56/32 action=drop comment=downP2P KDT# 酷乐add chain=forward

25、 protocol=tcp dst-port=6800-6801 action=drop comment=downMP3 Kuroadd chain=forward protocol=tcp dst-port=7003 action=dropadd chain=forward dst-address=218.244.45.67/32 action=dropadd chain=forward dst-address=220.169.192.145/32 action=drop# XX下吧add chain=forward protocol=tcp dst-port=11000 action=dr

26、op comment=downP2P BaiDuXiaBa disabled=yesadd chain=forward dst-address=202.108.249.171/32 action=drop# 百兆P2Padd chain=forward protocol=tcp dst-port=9000 action=drop comment=downP2P baizhaoP2Padd chain=forward dst-address=221.233.19.30/32 action=drop# 石头(OPENEXT)add chain=forward protocol=tcp dst-po

27、rt=5467 action=drop comment=downP2P OPENEXTadd chain=forward protocol=tcp dst-port=2500 action=dropadd chain=forward protocol=tcp dst-port=4173 action=dropadd chain=forward protocol=tcp dst-port=10002 action=dropadd chain=forward protocol=tcp dst-port=10003 action=dropadd chain=forward dst-address=6

28、6.197.13.166/32 action=dropadd chain=forward dst-address=210.22.12.245/32 action=dropadd chain=forward dst-address=69.93.222.56/32 action=drop# iLink 1.1add chain=forward protocol=tcp dst-port=5000 action=drop comment=downP2P iLink# DDSadd chain=forward protocol=tcp dst-port=11608 action=drop commen

29、t=downP2P DDSadd chain=forward dst-address=210.51.168.13/32 action=dropadd chain=forward dst-address=211.157.105.252/32 action=dropadd chain=forward dst-address=212.179.66.17/32 action=drop# iMesh 5add chain=forward protocol=tcp dst-port=4662 action=drop comment=downP2P iMesh 5add chain=forward dst-

30、address=212.179.66.17/32 action=dropadd chain=forward dst-address=212.179.66.24/32 action=dropadd chain=forward dst-address=38.117.175.23/32 action=drop# winmxadd chain=forward protocol=tcp dst-port=5690 action=drop comment=downP2P winmxadd chain=forward dst-address=64.246.15.43/32 action=drop# 网酷ad

31、d chain=forward protocol=tcp dst-port=2122 action=drop comment=downP2P netcooladd chain=forward dst-address=211.152.22.9/32 action=dropadd chain=forward dst-address=211.152.22.101/32 action=dropadd chain=forward dst-address=221.192.132.29/32 action=drop# PPlive网络电视add chain=forward protocol=tcp dst-port=8008 action=drop comment=P2PTV PPliveadd chain=forward protocol=udp dst-port=4004 action=drop# QQ直播add chain=forward protocol=udp dst-port=13002-13999 action=drop comment=P2PTV QQ disabled