ROS通用脚本命令精典大放送.doc

ROS通用脚本命令精典大放送-脚本使用方法 ROUTEROS常用命令/sy reset 恢复路由原始状态/sy reboot 重启路由/sy showdown 关机/sy ide set name=机器名 设置机器名 /export 查看配置 /ip export 查看IP配置/sy backup 回车save name=你要设置文件名 备份路由LOAD NAME=你要设置文件名 恢复备份/interface print 查看网卡状态0 X ether1 ether 1500 这个是网卡没有开启0 R ether1 ether 1500 这个是正常状态/int en 0 激活0网卡/int di 0 禁掉0网卡/ip fir con print 查看当前所有网络边接/ip service set www port=81 改变www服务端口为81/ip hotspot user add name=user1 password=1 增加用户一：限速脚本 :for wbsz from 1 to 254 do=/queue simple add name=(wbsz . $wbsz) dst-address=(192.168.0. . $wbsz) limit-at=1024K/1024K max-limit=1024K/1024K二：限制每台机最大线程数 :for wbsz from 1 to 254 do=/ip firewall filter add chain=forward src-address=(192.168.0. . $wbsz) protocol=tcp connection-limit=50,32 action=drop三：端口映射 ip firewall nat add chain=dstnat dst-address=(34) protocol=tcp dst-port=80 to-addresses=() to-ports=80 action=dst-nat四：封端口号/ ip firewall filter ad ch forward pr tcp dst-po 8000 act drop comment=Blockade QQ五：更变telnet服务端口 /ip service set telnet port=23六：更变SSH管理服务端口 /ip service set ssh port=22七：更变www服务端口号 /ip service set www port=80八：更变FTP服务端口号 /ip service set ftp port=21九：增加本ROS管理用户 /user add name=wbsz password=admin group=full十：删除限速脚本 :for wbsz from 1 to 254 do=/queue simple remove (wbsz . $wbsz) 十一：封IP脚步本 / ip firewall filter add chain=forward dst-address=8/32 action=drop comment=Blockade QQ十二：禁P2P脚本 / ip firewall filter add chain=forward src-address=/24 p2p=all-p2p action=drop comment=No P2P十三：限制每台机最大的TCP线程数(线程数=60) / ip firewall filter add chain=forward protocol=tcp connection-limit=60,32 action=drop disabled=no十四：一次性绑定所有在线机器MAC :foreach wbsz in=/ip arp find dynamic=yes do=/ip arp add copy-from=$wbsz十五：解除所以绑定的MAC :foreach wbsz in /ip arp find do=/ip arp remove $wbsz十六：禁Ping / ip firewall filter add chain=output protocol=icmp action=drop comment=No Ping十七：禁电驴 / ip firewall filter add chain=forward protocol=tcp dst-port=4661-4662 action=drop comment=No Emule add chain=forward protocol=tcp dst-port=4242 action=drop add chain=forward dst-address=5 action=drop十八：禁PPLIVE / ip firewall filter add chain=forward protocol=tcp dst-port=8008 action=drop comment=No PPlive TV add chain=forward protocol=udp dst-port=4004 action=drop add chain=forward dst-address=1 action=drop十九：禁QQ直播 / ip firewall filter add chain=forward protocol=udp dst-port=13000-14000 action=drop comment=No QQLive二十：禁比特精灵 / ip firewall filter add chain=forward protocol=tcp dst-port=16881 action=drop comment=No BitSpirit 二十一：禁QQ聊天(没事不要用) / ip firewall filter add chain=forward src-address=/32 action=accept comment=No Tencent QQ ad ch forward pr tcp dst-po 8000 act drop ad ch forward pr udp dst-po 8000 act drop ad ch forward pr udp dst-po 8000 act drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=63/32 action=drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=0/32 action=drop add chain=forward dst-address=1/32 action=drop add chain=forward dst-address=2/32 action=drop add chain=forward dst-address=3/32 action=drop add chain=forward dst-address=53/32 action=drop add chain=forward dst-address=65/32 action=drop add chain=forward dst-address=20/32 action=drop add chain=forward dst-address=0/32 action=drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=/24 action=drop add chain=forward dst-address=/24 action=drop add chain=forward content=sz.tencent action=reject add chain=forward content=sz2.tencent action=reject add chain=forward content=sz3.tencent action=reject add chain=forward content=sz4.tencent action=reject add chain=forward content=sz5.tencent action=reject add chain=forward content=sz6.tencent action=reject add chain=forward content=sz7.tencent action=reject add chain=forward content=sz8.tencent action=rejec add chain=forward content=sz9.tencent action=rejec add chain=forward content=tcpconn.tencent action=reject add chain=forward content=tcpconn2.tencent action=reject add chain=forward content=tcpconn3.tencent action=reject add chain=forward content=tcpconn4.tencent action=reject add chain=forward content=tcpconn5.tencent action=reject add chain=forward content=tcpconn6.tencent action=reject add chain=forward content=tcpconn7.tencent action=reject add chain=forward content=tcpconn8.tencent action=reject add chain=forward content=qq action=reject add chain=forward content=www.qq action=reject二十二：防止灰鸽子入浸 / ip firewall filter add chain=forward protocol=tcp dst-port=1999 action=drop comment=Backdoor.GrayBird.ad add chain=forward dst-address=25 action=drop add chain=forward dst-address=68 action=drop add chain=forward dst-address=06 action=drop add chain=forward dst-address=3 action=drop add chain=forward dst-address=10 action=drop add chain=forward dst-address=8 action=drop add chain=forward dst-address=7 action=drop add chain=forward dst-address=07 action=drop add chain=forward dst-address=98 action=drop add chain=forward dst-address=1 action=drop二十三：防三波 / ip firewall filter add chain=forward protocol=tcp