winbox 端口扫描_ROS 6.X 防火墙过滤端口扫描。

/ip firewall filter

add action=add-src-to-address-list address-list="port scanners" \

address-list-timeout=2w chain=input comment="port scanners to list " \

protocol=tcp psd=21,3s,3,1

add action=add-src-to-address-list address-list="port scanners" \

address-list-timeout=2w chain=input comment="NMAP FIN Stealth scan" \

protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg

add action=add-src-to-address-list address-list="port scanners" \

address-list-timeout=2w chain=input comment="SYN/FIN scan" protocol=tcp \

tcp-flags=fin,syn

add action=add-src-to-address-list address-list="port scanners" \

address-list-timeout=2w ch