REgras de firewall

venho aqui umidimente GEronimo pede umas regras de firewall em geral filter rules nat mangle. boas se nao poder postar mande para meu email agradecimento ds sei que nen todas vao poder posta mais favor mande para meu email blz.fica com DEUS
mande para meu email asim ficar melhor e fica com DEUs sem pedi muito

Se quiser umas regras básica e de dominio público e só deixar seu post aqui, te mando por e-mail, Ok
Edgard

Edgard Righi escreveu:Se quiser umas regras básica e de dominio público e só deixar seu post aqui, te mando por e-mail, Ok
Edgard

ESAS basica eu TEnho mais BRigado quero avanvada GEronimo min AJUda ai

dsdigital escreveu:

Edgard Righi escreveu:Se quiser umas regras básica e de dominio público e só deixar seu post aqui, te mando por e-mail, Ok
Edgard

ESAS basica eu TEnho mais BRigado quero avanvada GEronimo min AJUda ai

diga para quais as finalidades para que eu possa dar uma procurada aqui e postar

QUErto TUDO JERONimo TUDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

eu quero tbm isso se for possivel
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

opa eu tbm tava querendo issas regras..

kkkkkkkkkkkk todos nós vlws geronimo

o bom seria postar aqui ne gente, pra todos

netuai escreveu:o bom seria postar aqui ne gente, pra todos

assim que for liberado agente posta.

to no aguardo....

Eu tambem quero geronimo, por favol;
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Eita povo pidão.... mais para não ficar sozinho MANDA AI TB QUERO KKKKKK

opa geronimo é o edvanio é sobre as regras do thunder se voce puder me enviar por email desde ja eu eu agradeço muito obtigado

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Opa eu também quero obrigado ...
emai: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

opa se tiver tempo manda ai pra gente melhorar aqui cada vez mais
email [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Eu tmb to nafila...

/ip firewall mangle
add action=mark-connection chain=postrouting comment="TOS12 #########################################################\
########################################################################################" disabled=no dscp=12 \
new-connection-mark=proxy-hits passthrough=yes src-address=192.168.10.2
add action=mark-packet chain=postrouting comment="" connection-mark=proxy-hits disabled=no new-packet-mark=\
proxy-squid passthrough=yes
add action=mark-connection chain=postrouting comment="CACHE FULL ####################################################\
#############################################################################################" content=\
"X-Cache: HIT" disabled=no new-connection-mark=forward-hits passthrough=yes src-address=192.168.10.2
add action=mark-packet chain=postrouting comment="" connection-mark=forward-hits disabled=no new-packet-mark=\
cache-hits passthrough=yes
add action=mark-connection chain=postrouting comment="THUNDER CACHE FULL" content="X-Cache: HIT from Thunder" \
disabled=no new-connection-mark=thunder-connection passthrough=yes protocol=tcp src-address=192.168.10.2 \
src-port=5128
add action=mark-packet chain=postrouting comment="" connection-mark=thunder-connection disabled=no new-packet-mark=\
thunder-packs passthrough=yes
add action=mark-connection chain=prerouting comment=MSN disabled=no dst-port=6891-6901 new-connection-mark=msn \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=6891-6901 new-connection-mark=msn \
passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=1863 new-connection-mark=msn \
passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=1863 new-connection-mark=msn \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=5190 new-connection-mark=msn \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=msn disabled=no new-packet-mark=msn passthrough=\
no
add action=mark-connection chain=prerouting comment="PAGINAS ESPECIAIS" disabled=no dst-address-list=especial \
new-connection-mark=especial-c passthrough=yes
add action=mark-packet chain=prerouting comment="" connection-mark=especial-c disabled=no new-packet-mark=especial \
passthrough=no
add action=mark-connection chain=prerouting comment=WINBOX disabled=yes new-connection-mark=winbox passthrough=yes \
protocol=tcp src-port=8291
add action=mark-connection chain=prerouting comment="" disabled=yes dst-port=8291 new-connection-mark=winbox \
passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=winbox disabled=yes new-packet-mark=winbox \
passthrough=no
add action=mark-connection chain=prerouting comment="MEDIDORES DE VELOCIDADE" disabled=no new-connection-mark=\
medidores passthrough=yes src-address-list=medidor
add action=mark-packet chain=prerouting comment="" connection-mark=medidores disabled=no new-packet-mark=medidores \
passthrough=no
add action=mark-connection chain=postrouting comment="" disabled=no new-connection-mark=medidores passthrough=yes \
src-address-list=medidor
add action=mark-packet chain=postrouting comment="" connection-mark=medidores disabled=no new-packet-mark=medidores \
passthrough=no
add action=mark-connection chain=prerouting comment=VOIP disabled=no new-connection-mark=voip passthrough=yes \
protocol=udp src-port=10000-20000
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=5060-5061 new-connection-mark=voip \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=voip disabled=no new-packet-mark=voip \
passthrough=no
add action=mark-connection chain=prerouting comment="HTTPS -DNS" disabled=no dst-port=443 new-connection-mark=web \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=443 new-connection-mark=web passthrough=\
yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=53 new-connection-mark=web passthrough=\
yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=web disabled=no new-packet-mark=http passthrough=\
no
add action=mark-packet chain=prerouting comment=ICMP disabled=no new-packet-mark=icmp passthrough=no protocol=icmp
add action=mark-connection chain=prerouting comment=P2P disabled=no new-connection-mark=p2p_conn p2p=all-p2p \
passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-limit=40,32 disabled=no new-connection-mark=\
p2p_con p2p=all-p2p passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=p2p_conn disabled=no new-packet-mark=p2p \
passthrough=no
add action=mark-packet chain=prerouting comment="" connection-mark=p2p_con disabled=no new-packet-mark=p2p \
passthrough=no
add action=mark-connection chain=prerouting comment=EMAIL disabled=no dst-port=110 new-connection-mark=email \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=995 new-connection-mark=email \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=25 new-connection-mark=email \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=465 new-connection-mark=email \
passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=email disabled=no new-packet-mark=email \
passthrough=no
add action=mark-connection chain=prerouting comment=STREAMINGS disabled=no dst-port=554 new-connection-mark=stream \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=554 new-connection-mark=stream \
passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=8554 new-connection-mark=stream \
passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=1755 new-connection-mark=stream \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=stream disabled=no new-packet-mark=stream \
passthrough=no
add action=mark-connection chain=prerouting comment=FTP disabled=no dst-port=20-21 new-connection-mark=ftp \
passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=ftp disabled=no new-packet-mark=ftp passthrough=\
no
add action=mark-connection chain=prerouting comment="ACESSOS REMOTOS" disabled=yes dst-port=5900-5999 \
new-connection-mark=vnc passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=yes dst-port=3389 new-connection-mark=vnc \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=yes dst-port=22 new-connection-mark=vnc passthrough=\
yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=yes dst-port=23 new-connection-mark=vnc passthrough=\
yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=vnc disabled=yes new-packet-mark=vnc passthrough=\
no
add action=mark-connection chain=prerouting comment=UDP disabled=no new-connection-mark=udp_teste passthrough=yes \
protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=udp_teste disabled=no new-packet-mark=udp \
passthrough=no
add action=mark-packet chain=prerouting comment="TODO O RESTANTE" disabled=no dst-address=!192.168.10.0/30 \
new-packet-mark=outros passthrough=no src-address=!192.168.10.0/30
add action=mark-connection chain=prerouting comment="DEIXAR PAGINA DE LOGIN SEM CONTROLE DE BANDA" disabled=no \
new-connection-mark=conn_hotspot passthrough=yes protocol=tcp src-port=64872-64875
add action=mark-connection chain=output comment="" disabled=no new-connection-mark=conn_hotspot passthrough=yes \
protocol=tcp src-port=64872-64875
add action=mark-packet chain=prerouting comment="" connection-mark=conn_hotspot disabled=no new-packet-mark=\
pacotes_hotspot passthrough=yes
add action=mark-connection chain=prerouting comment=Medidores disabled=no dst-address-list=velocimetros \
new-connection-mark=medidor passthrough=yes
add action=mark-packet chain=prerouting comment="" connection-mark=medidor disabled=no new-packet-mark=medidor_pct \
passthrough=yes

opa tambem tava precisando de umas regras e dominios publicos preciso levar a galera a loucura em sites como orkut , facebook , twiteer etc...

ai vai meu e-mail = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

opa se tiver tempo manda ai pra gente melhorar aqui cada vez mais
email [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Gentileza galera preciso e regras basicas. para mk com modem bridge etc

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]. agradecido desde ja

ola

qual a regra de firewall para bloquear todos os sites e liberar somente a lista branca

ae turma vcs podem me explicar pra quer ser essa regra UDP TOU MEIO
desconfiado aqui turma e uma boa pascoa pra todos

Ops Eu tambem quero....
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Gostaria de mais pra segurança.