اتفضل ياغالى
هذة جميع الرولات اللى ممكن تحتاجها فى تظبيط سيرفرك
والملف اكبر من الحجم المسموح به بالرفع فى المرفقات فقمن بوضعهم بهذا الشكل
اتفضـــــــــــــــــــــــــــــــــــل يااااااااااااااااااااغالى
___________________________________
الرول الخاص بضبط البنج
/ip firewall mangle
add action=mark-connection chain=postrouting comment="adel elbasyouni qos of ping" disabled=\
no new-connection-mark=ping-ip passthrough=yes protocol=icmp
add action=mark-packet chain=postrouting comment=" adel elbasyouni qos of ping" \
connection-mark=ping-ip disabled=no new-packet-mark=packet_ip \
passthrough=yes
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
max-limit=0 name="ip qos output" packet-mark=packet_ip parent=global-out \
priority=8 queue=default
الاسكربت الخاص بضبط الوقت فى المايكروتيك نهائى ومليون الميه
#set clock
/system clock
set time-zone-name=africa/cairo
#set ntp server
/system ntp client
set enabled=yes mode=unicast primary-ntp=186.46.24.82 secondary-ntp=169.229.70.95
اغلاق اجبارى للمواقع الاباحية حتى لو غير باستخدام دى اس ان يدوى
/ip firewall nat
add action=dst-nat chain=dstnat comment="dns batot" disabled=no dst-port=\
53 protocol=tcp to-addresses=180.131.144.144 to-ports=53
add action=dst-nat chain=dstnat comment="dns batot" disabled=no dst-port=\
53 protocol=udp to-addresses=180.131.145.145 to-ports=53
لضبط الاسكاى بى
/ip firewall layer7-protocol
add name=skypenack regexp="[\\\\|\\xd5]"
/ip firewall mangle
add action=add-src-to-address-list address-list=skype address-list-timeout=1h \
chain=forward disabled=no layer7-protocol=skypenack packet-size=39 \
protocol=udp
add action=mark-connection chain=forward connection-rate=0-50k disabled=no \
new-connection-mark=conn_skype passthrough=yes protocol=udp \
src-address-list=skype
add action=mark-connection chain=forward connection-rate=0-50k disabled=no \
dst-address-list=skype new-connection-mark=conn_skype passthrough=yes \
protocol=udp
add action=mark-packet chain=forward connection-mark=conn_skype disabled=no \
new-packet-mark=skype passthrough=no
/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k \
max-limit=512k name=skpehits packet-mark=skype parent=global-out priority=8 \
queue=default
تظبيط الفيس بوك
/ip firewall mangle
add action=mark-connection chain=forward comment=" batot face book" disabled=\
no new-connection-mark=fcb_conn passthrough=yes protocol=tcp
add action=mark-connection chain=forward disabled=no new-connection-mark=\
fcb_conn passthrough=yes protocol=tcp
add action=mark-packet chain=forward connection-mark=fcb_conn disabled=no \
new-packet-mark=facebook passthrough=yes
add action=mark-connection chain=prerouting disabled=no new-connection-mark=\
fcb_conn passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=fcb_conn disabled=no \
new-packet-mark=facebook passthrough=yes
/ip firewall layer7-protocol
add name=facebook regexp=facebook-~]*(content-type:facebook)
سكربت الفيروسات
/ip firewall filter
add action=drop chain=forward disabled=no p2p=all-p2p
add action=accept chain=forward comment="allow established connections" \
connection-state=established disabled=no
add action=accept chain=forward comment="allow related connections" \
connection-state=related disabled=no
add action=drop chain=forward comment="drop invalid connections" \
connection-state=invalid disabled=no
add action=accept chain=icmp comment=ping5 disabled=no icmp-options=0:0-255 \
limit=5,5 protocol=icmp
add action=accept chain=icmp comment=traceroute5 disabled=no icmp-options=3:3 \
limit=5,5 protocol=icmp
add action=accept chain=icmp comment=mtu5 disabled=no icmp-options=3:4 limit=\
5,5 protocol=icmp
add action=accept chain=icmp comment=ping5 disabled=no icmp-options=8:0-255 \
limit=5,5 protocol=icmp
add action=accept chain=icmp comment="trace ttl5" disabled=no icmp-options=\
11:0-255 limit=5,5 protocol=icmp
add action=drop chain=icmp comment=icmp disabled=no protocol=icmp
add action=drop chain=forward connection-state=invalid disabled=no
add action=drop chain=forward disabled=no src-address-type=!unicast
add action=jump chain=forward comment=icmp disabled=no jump-target=icmp \
protocol=icmp
add action=drop chain=virus comment=deepthroat.trojan-1 disabled=no dst-port=\
41 protocol=tcp
add action=drop chain=virus comment=worm.netsky.y@mm disabled=no dst-port=82 \
protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-1 disabled=no \
dst-port=113 protocol=tcp
add action=drop chain=virus comment=w33.korgo.a/b/c/d/e/f-2 disabled=no \
dst-port=2041 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-2 disabled=no dst-port=\
3150 protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-3 disabled=no \
dst-port=3067 protocol=tcp
add action=drop chain=virus comment=backdoor.irc.aladdinz.r-1 disabled=no \
dst-port=3422 protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-4 disabled=no \
dst-port=6667 protocol=tcp
add action=drop chain=virus comment=worm.netsky.s/t/u@mm disabled=no \
dst-port=6789 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-1 disabled=no \
dst-port=8787 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-2 disabled=no \
dst-port=8879 protocol=tcp
add action=drop chain=virus comment=w32.dabber.a/b-2 disabled=no dst-port=\
8967 protocol=tcp
add action=drop chain=virus comment=w32.dabber.a/b-3 disabled=no dst-port=\
9999 protocol=tcp
add action=drop chain=virus comment=block.netbus.trojan-2 disabled=no \
dst-port=20034 protocol=tcp
add action=drop chain=virus comment=girlfriend.trojan-1 disabled=no dst-port=\
21554 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-3 disabled=no \
dst-port=31666 protocol=tcp
add action=drop chain=virus comment=backdoor.irc.aladdinz.r-2 disabled=no \
dst-port=43958 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-3 disabled=no dst-port=\
999 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-4 disabled=no dst-port=\
6670 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-5 disabled=no dst-port=\
6771 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-6 disabled=no dst-port=\
60000 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-1 disabled=no \
dst-port=10067 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-2 disabled=no \
dst-port=10167 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-3 disabled=no \
dst-port=3700 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-4 disabled=no \
dst-port=9872-9875 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-1 disabled=no \
dst-port=6883 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-2 disabled=no \
dst-port=26274 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-3 disabled=no \
dst-port=4444 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-7 disabled=no dst-port=\
2140 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-4 disabled=no \
dst-port=47262 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-1 disabled=no dst-port=\
3791 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-2 disabled=no dst-port=\
3801 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-3 disabled=no dst-port=\
65390 protocol=tcp
add action=drop chain=virus comment=y3k.rat.trojan-1 disabled=no dst-port=\
5880-5882 protocol=tcp
add action=drop chain=virus comment=y3k.rat.trojan-2 disabled=no dst-port=\
5888-5889 protocol=tcp
add action=drop chain=virus comment=netsphere.trojan-1 disabled=no dst-port=\
30100-30103 protocol=tcp
add action=drop chain=virus comment=netsphere.trojan-2 disabled=no dst-port=\
30133 protocol=tcp
add action=drop chain=virus comment=netmonitor.trojan-1 disabled=no dst-port=\
7300-7301 protocol=tcp
add action=drop chain=virus comment=netmonitor.trojan-2 disabled=no dst-port=\
7306-7308 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-1 disabled=no \
dst-port=79 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-2 disabled=no \
dst-port=5031 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-3 disabled=no \
dst-port=5321 protocol=tcp
add action=drop chain=virus comment=thething.trojan-1 disabled=no dst-port=\
6400 protocol=tcp
add action=drop chain=virus comment=thething.trojan-2 disabled=no dst-port=\
7777 protocol=tcp
add action=drop chain=virus comment=gatecrasher.trojan-1 disabled=no \
dst-port=1047 protocol=tcp
add action=drop chain=virus comment=gatecrasher.trojan-2 disabled=no \
dst-port=6969-6970 protocol=tcp
add action=drop chain=virus comment=subseven-1 disabled=no dst-port=2774 \
protocol=tcp
add action=drop chain=virus comment=subseven-2 disabled=no dst-port=27374 \
protocol=tcp
add action=drop chain=virus comment=subseven-3 disabled=no dst-port=1243 \
protocol=tcp
add action=drop chain=virus comment=subseven-4 disabled=no dst-port=1234 \
protocol=tcp
add action=drop chain=virus comment=subseven-5 disabled=no dst-port=6711-6713 \
protocol=tcp
add action=drop chain=virus comment=subseven-7 disabled=no dst-port=16959 \
protocol=tcp
add action=drop chain=virus comment=moonpie.trojan-1 disabled=no dst-port=\
25685-25686 protocol=tcp
add action=drop chain=virus comment=moonpie.trojan-2 disabled=no dst-port=\
25982 protocol=tcp
add action=drop chain=virus comment=netspy.trojan-3 disabled=no dst-port=\
31337-31339 protocol=tcp
add action=drop chain=virus comment=trojan disabled=no dst-port=8102 \
protocol=tcp
add action=drop chain=virus comment=way.trojan disabled=no dst-port=8011 \
protocol=tcp
add action=drop chain=virus comment=trojan.binghe disabled=no dst-port=7626 \
protocol=tcp
add action=drop chain=virus comment=trojan.niansehoyian disabled=no dst-port=\
19191 protocol=tcp
add action=drop chain=virus comment=netbull.trojan disabled=no dst-port=\
23444-23445 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-1 disabled=no dst-port=\
2583 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-2 disabled=no dst-port=\
3024 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-3 disabled=no dst-port=\
4092 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-4 disabled=no dst-port=\
5714 protocol=tcp
add action=drop chain=virus comment=doly1.0/1.35/1.5trojan-1 disabled=no \
dst-port=1010-1012 protocol=tcp
add action=drop chain=virus comment=doly1.0/1.35/1.5trojan-2 disabled=no \
dst-port=1015 protocol=tcp
add action=drop chain=virus comment=transscout.trojan-1 disabled=no dst-port=\
2004-2005 protocol=tcp
add action=drop chain=virus comment=transscout.trojan-2 disabled=no dst-port=\
9878 protocol=tcp
add action=drop chain=virus comment=backdoor.yai..trojan-1 disabled=no \
dst-port=2773 protocol=tcp
add action=drop chain=virus comment=backdoor.yai.trojan-2 disabled=no \
dst-port=7215 protocol=tcp
add action=drop chain=virus comment=backdoor.yai.trojan-3 disabled=no \
dst-port=54283 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-1 disabled=no dst-port=\
1003 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-2 disabled=no dst-port=\
5598 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-3 disabled=no dst-port=\
5698 protocol=tcp
add action=drop chain=virus comment=schainwindlertrojan-2 disabled=no \
dst-port=31554 protocol=tcp
add action=drop chain=virus comment=shaft.ddos.trojan-1 disabled=no dst-port=\
18753 protocol=tcp
add action=drop chain=virus comment=shaft.ddos.trojan-2 disabled=no dst-port=\
20432 protocol=tcp
add action=drop chain=virus comment=devil.ddos.trojan disabled=no dst-port=\
65000 protocol=tcp
add action=drop chain=virus comment=latinustrojan-1 disabled=no dst-port=\
11831 protocol=tcp
add action=drop chain=virus comment=latinustrojan-2 disabled=no dst-port=\
29559 protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-1 disabled=no dst-port=1784 \
protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-2 disabled=no dst-port=3586 \
protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-3 disabled=no dst-port=7609 \
protocol=tcp
add action=drop chain=virus comment=bionettrojan-1 disabled=no dst-port=\
12348-12349 protocol=tcp
add action=drop chain=virus comment=bionettrojan-2 disabled=no dst-port=12478 \
protocol=tcp
add action=drop chain=virus comment=bionettrojan-3 disabled=no dst-port=57922 \
protocol=tcp
add action=drop chain=virus comment=worm.novarg.a.mydoom.a1. Disabled=no \
dst-port=3127 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.a.bagle.a. Disabled=no \
dst-port=6777 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.b disabled=no dst-port=8866 \
protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.c-g/j-l disabled=no \
dst-port=2745 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.p/q/r/n disabled=no \
dst-port=2556 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.m-2 disabled=no dst-port=\
20742 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.s/t/u/v disabled=no \
dst-port=4751 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.aa/ab/w/x-z-2 disabled=no \
dst-port=2535 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.r.rpcexploit disabled=no \
dst-port=5238 protocol=tcp
add action=drop chain=virus comment=worm.sasser.a disabled=no dst-port=1068 \
protocol=tcp
add action=drop chain=virus comment=worm.sasser.b/c/f disabled=no dst-port=\
5554 protocol=tcp
add action=drop chain=virus comment=worm.sasser.b/c/f disabled=no dst-port=\
9996 protocol=tcp
add action=drop chain=virus comment=worm.sasser.d disabled=no dst-port=9995 \
protocol=tcp
add action=drop chain=virus comment=worm.lovgate.a/b/c/d disabled=no \
dst-port=10168 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.v.qq disabled=no dst-port=\
20808 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.f/g disabled=no dst-port=\
1092 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.f/g disabled=no dst-port=\
20168 protocol=tcp
add action=drop chain=virus comment=ndm.requester disabled=no dst-port=\
1363-1364 protocol=tcp
add action=drop chain=virus comment=screen.cast disabled=no dst-port=1368 \
protocol=tcp
add action=drop chain=virus comment=hromgrafx disabled=no dst-port=1373 \
protocol=tcp
add action=drop chain=virus comment=cichainlid disabled=no dst-port=1377 \
protocol=tcp
add action=drop chain=virus comment=backdoor.optixprotocol disabled=no \
dst-port=3410 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.b disabled=no dst-port=8888 \
protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-7 disabled=no \
dst-port=44444 protocol=udp
add action=drop chain=virus comment=worm.sobig.f-3 disabled=no dst-port=8998 \
protocol=udp
add action=drop chain=virus comment=worm.sobig.f-1 disabled=no dst-port=123 \
protocol=udp
add action=drop chain=virus comment=worm.novarg.a.mydoom.a2. Disabled=no \
dst-port=3198 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
139 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
135 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
445 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
135-139 protocol=tcp
add action=drop chain=virus comment="drop messenger worm" disabled=no \
dst-port=135-139 protocol=udp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
445 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
445 protocol=udp
add action=drop chain=virus comment=________ disabled=no dst-port=593 \
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1024-1030 \
protocol=tcp
add action=drop chain=virus comment="drop mydoom" disabled=no dst-port=1080 \
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1214 \
protocol=tcp
add action=drop chain=virus comment="ndm requester" disabled=no dst-port=1363 \
protocol=tcp
add action=drop chain=virus comment="ndm server" disabled=no dst-port=1364 \
protocol=tcp
add action=drop chain=virus comment="screen cast" disabled=no dst-port=1368 \
protocol=tcp
add action=drop chain=virus comment=hromgrafx disabled=no dst-port=1373 \
protocol=tcp
add action=drop chain=virus comment=cichlid disabled=no dst-port=1377 \
protocol=tcp
add action=drop chain=virus comment=worm disabled=no dst-port=1433-1434 \
protocol=tcp
add action=drop chain=virus comment="bagle virus" disabled=no dst-port=2745 \
protocol=tcp
add action=drop chain=virus comment="drop dumaru.y" disabled=no dst-port=2283 \
protocol=tcp
add action=drop chain=virus comment="drop beagle" disabled=no dst-port=2535 \
protocol=tcp
add action=drop chain=virus comment="drop beagle.c-k" disabled=no dst-port=\
2745 protocol=tcp
add action=drop chain=virus comment="drop mydoom" disabled=no dst-port=\
3127-3128 protocol=tcp
add action=drop chain=virus comment="drop backdoor optixpro" disabled=no \
dst-port=3410 protocol=tcp
add action=drop chain=virus comment=worm disabled=no dst-port=4444 protocol=\
tcp
add action=drop chain=virus comment=worm disabled=no dst-port=4444 protocol=\
udp
add action=drop chain=virus comment="drop sasser" disabled=no dst-port=5554 \
protocol=tcp
add action=drop chain=virus comment="drop beagle.b" disabled=no dst-port=8866 \
protocol=tcp
add action=drop chain=virus comment="drop dabber.a-b" disabled=no dst-port=\
9898 protocol=tcp
add action=drop chain=virus comment="drop dumaru.y" disabled=no dst-port=\
10000 protocol=tcp
add action=drop chain=virus comment="drop mydoom.b" disabled=no dst-port=\
10080 protocol=tcp
add action=drop chain=virus comment="drop netbus" disabled=no dst-port=12345 \
protocol=tcp
add action=drop chain=virus comment="drop kuang2" disabled=no dst-port=17300 \
protocol=tcp
add action=drop chain=virus comment="drop subseven" disabled=no dst-port=\
27374 protocol=tcp
add action=drop chain=virus comment="drop phatbot, agobot, gaobot" disabled=\
no dst-port=65506 protocol=tcp
add action=jump chain=forward comment="jump to the virus chain" disabled=no \
jump-target=virus
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=accept chain=input disabled=no protocol=tcp tcp-flags=\
fin,!syn,!rst,!psh,!ack,!urg
add action=accept chain=input disabled=no protocol=tcp tcp-flags=fin,syn
add action=accept chain=input disabled=no protocol=tcp tcp-flags=syn,rst
add action=accept chain=input disabled=no protocol=tcp tcp-flags=\
fin,psh,urg,!syn,!rst,!ack
add action=accept chain=input disabled=no protocol=tcp tcp-flags=\
fin,syn,rst,psh,ack,urg
add action=accept chain=input disabled=no protocol=tcp tcp-flags=\
!fin,!syn,!rst,!psh,!ack,!urg
add action=accept chain=forward comment="allow established connections" \
connection-state=established disabled=no
add action=accept chain=forward comment="allow related connections" \
connection-state=related disabled=no
add action=drop chain=forward comment="drop invalid connections" \
connection-state=invalid disabled=no
add action=jump chain=forward comment="jump to the virus chain" disabled=no \
jump-target=virus
add action=passthrough chain=unused-hs-chain comment=\
"begining of the viruslist" disabled=yes
add action=drop chain=virus comment="drop mydoom" disabled=no dst-port=\
3127-3128 protocol=tcp
add action=drop chain=virus comment="drop messenger worm" disabled=no \
dst-port=135-139 protocol=udp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
135-139 protocol=tcp
add action=drop chain=virus comment=worm.sobig.f-1 disabled=no dst-port=123 \
protocol=udp
add action=drop chain=virus comment=gatecrasher.trojan-2 disabled=no \
dst-port=6969-6970 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
445 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
445 protocol=udp
add action=drop chain=virus comment="screen cast" disabled=no dst-port=1368 \
protocol=tcp
add action=drop chain=virus comment="drop mydoom" disabled=no dst-port=1080 \
protocol=tcp
add action=drop chain=virus comment="ndm requester" disabled=no dst-port=1363 \
protocol=tcp
add action=drop chain=virus comment="ndm server" disabled=no dst-port=1364 \
protocol=tcp
add action=drop chain=virus comment="drop beagle" disabled=no dst-port=2535 \
protocol=tcp
add action=drop chain=virus comment=worm disabled=no dst-port=4444 protocol=\
udp
add action=drop chain=virus comment="drop dabber.a-b" disabled=no dst-port=\
9898 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-1 disabled=no dst-port=\
41 protocol=tcp
add action=drop chain=virus comment=worm.netsky.y@mm disabled=no dst-port=82 \
protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-1 disabled=no \
dst-port=113 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-2 disabled=no \
dst-port=8879 protocol=tcp
add action=drop chain=virus comment=block.netbus.trojan-2 disabled=no \
dst-port=20034 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-6 disabled=no dst-port=\
60000 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-2 disabled=no \
dst-port=10167 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-2 disabled=no \
dst-port=26274 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-3 disabled=no \
dst-port=4444 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-4 disabled=no \
dst-port=47262 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-2 disabled=no dst-port=\
3801 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-1 disabled=no \
dst-port=79 protocol=tcp
add action=drop chain=virus comment=subseven-3 disabled=no dst-port=1243 \
protocol=tcp
add action=drop chain=virus comment=way.trojan disabled=no dst-port=8011 \
protocol=tcp
add action=drop chain=virus comment=trojan.niansehoyian disabled=no dst-port=\
19191 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-3 disabled=no dst-port=\
4092 protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-1 disabled=no dst-port=1784 \
protocol=tcp
add action=drop chain=virus comment=bionettrojan-3 disabled=no dst-port=57922 \
protocol=tcp
add action=drop chain=virus comment=worm.lovgate.f/g disabled=no dst-port=\
20168 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.b disabled=no dst-port=8888 \
protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-7 disabled=no \
dst-port=44444 protocol=udp
add action=drop chain=virus comment=worm.sobig.f-3 disabled=no dst-port=8998 \
protocol=udp
add action=drop chain=virus comment=worm.novarg.a.mydoom.a2. Disabled=no \
dst-port=3198 protocol=tcp
add action=drop chain=virus comment="drop blaster worm" disabled=no dst-port=\
139 protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=593 \
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1024-1030 \
protocol=tcp
add action=drop chain=virus comment="drop mydoom" disabled=no dst-port=1080 \
protocol=tcp
add action=drop chain=virus comment=________ disabled=no dst-port=1214 \
protocol=tcp
add action=drop chain=virus comment=cichlid disabled=no dst-port=1377 \
protocol=tcp
add action=drop chain=virus comment=worm disabled=no dst-port=1433-1434 \
protocol=tcp
add action=drop chain=virus comment="drop dumaru.y" disabled=no dst-port=2283 \
protocol=tcp
add action=drop chain=virus comment="drop backdoor optixpro" disabled=no \
dst-port=3410 protocol=tcp
add action=drop chain=virus comment="drop dumaru.y" disabled=no dst-port=\
10000 protocol=tcp
add action=drop chain=virus comment="drop mydoom.b" disabled=no dst-port=\
10080 protocol=tcp
add action=drop chain=virus comment="drop netbus" disabled=no dst-port=12345 \
protocol=tcp
add action=drop chain=virus comment="drop kuang2" disabled=no dst-port=17300 \
protocol=tcp
add action=drop chain=virus comment="drop phatbot, agobot, gaobot" disabled=\
no dst-port=65506 protocol=tcp
add action=drop chain=virus comment=w33.korgo.a/b/c/d/e/f-2 disabled=no \
dst-port=2041 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-2 disabled=no dst-port=\
3150 protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-3 disabled=no \
dst-port=3067 protocol=tcp
add action=drop chain=virus comment=backdoor.irc.aladdinz.r-1 disabled=no \
dst-port=3422 protocol=tcp
add action=drop chain=virus comment=w32.korgo.a/b/c/d/e/f-4 disabled=no \
dst-port=6667 protocol=tcp
add action=drop chain=virus comment=worm.netsky.s/t/u@mm disabled=no \
dst-port=6789 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-1 disabled=no \
dst-port=8787 protocol=tcp
add action=drop chain=virus comment=w32.dabber.a/b-2 disabled=no dst-port=\
8967 protocol=tcp
add action=drop chain=virus comment=w32.dabber.a/b-3 disabled=no dst-port=\
9999 protocol=tcp
add action=drop chain=virus comment=girlfriend.trojan-1 disabled=no dst-port=\
21554 protocol=tcp
add action=drop chain=virus comment=back.orifice.2000.trojan-3 disabled=no \
dst-port=31666 protocol=tcp
add action=drop chain=virus comment=backdoor.irc.aladdinz.r-2 disabled=no \
dst-port=43958 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-3 disabled=no dst-port=\
999 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-4 disabled=no dst-port=\
6670 protocol=tcp
add action=drop chain=virus comment=deepthroat.trojan-7 disabled=no dst-port=\
2140 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-1 disabled=no \
dst-port=10067 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-3 disabled=no \
dst-port=3700 protocol=tcp
add action=drop chain=virus comment=portal.of.doom.trojan-4 disabled=no \
dst-port=9872-9875 protocol=tcp
add action=drop chain=virus comment=delta.source.trojan-1 disabled=no \
dst-port=6883 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-1 disabled=no dst-port=\
3791 protocol=tcp
add action=drop chain=virus comment=eclypse.trojan-3 disabled=no dst-port=\
65390 protocol=tcp
add action=drop chain=virus comment=y3k.rat.trojan-2 disabled=no dst-port=\
5888-5889 protocol=tcp
add action=drop chain=virus comment=netsphere.trojan-1 disabled=no dst-port=\
30100-30103 protocol=tcp
add action=drop chain=virus comment=netsphere.trojan-2 disabled=no dst-port=\
30133 protocol=tcp
add action=drop chain=virus comment=netmonitor.trojan-1 disabled=no dst-port=\
7300-7301 protocol=tcp
add action=drop chain=virus comment=netmonitor.trojan-2 disabled=no dst-port=\
7306-7308 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-2 disabled=no \
dst-port=5031 protocol=tcp
add action=drop chain=virus comment=firehotcker.trojan-3 disabled=no \
dst-port=5321 protocol=tcp
add action=drop chain=virus comment=thething.trojan-1 disabled=no dst-port=\
6400 protocol=tcp
add action=drop chain=virus comment=thething.trojan-2 disabled=no dst-port=\
7777 protocol=tcp
add action=drop chain=virus comment=gatecrasher.trojan-1 disabled=no \
dst-port=1047 protocol=tcp
add action=drop chain=virus comment=subseven-1 disabled=no dst-port=2774 \
protocol=tcp
add action=drop chain=virus comment=subseven-2 disabled=no dst-port=27374 \
protocol=tcp
add action=drop chain=virus comment=subseven-4 disabled=no dst-port=1234 \
protocol=tcp
add action=drop chain=virus comment=subseven-5 disabled=no dst-port=6711-6713 \
protocol=tcp
add action=drop chain=virus comment=subseven-7 disabled=no dst-port=16959 \
protocol=tcp
add action=drop chain=virus comment=moonpie.trojan-1 disabled=no dst-port=\
25685-25686 protocol=tcp
add action=drop chain=virus comment=moonpie.trojan-2 disabled=no dst-port=\
25982 protocol=tcp
add action=drop chain=virus comment=netspy.trojan-3 disabled=no dst-port=\
31337-31339 protocol=tcp
add action=drop chain=virus comment=trojan disabled=no dst-port=8102 \
protocol=tcp
add action=drop chain=virus comment=trojan.binghe disabled=no dst-port=7626 \
protocol=tcp
add action=drop chain=virus comment=netbull.trojan disabled=no dst-port=\
23444-23445 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-1 disabled=no dst-port=\
2583 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-2 disabled=no dst-port=\
3024 protocol=tcp
add action=drop chain=virus comment=wincrash.trojan-4 disabled=no dst-port=\
5714 protocol=tcp
add action=drop chain=virus comment=doly1.0/1.35/1.5trojan-1 disabled=no \
dst-port=1010-1012 protocol=tcp
add action=drop chain=virus comment=doly1.0/1.35/1.5trojan-2 disabled=no \
dst-port=1015 protocol=tcp
add action=drop chain=virus comment=transscout.trojan-1 disabled=no dst-port=\
2004-2005 protocol=tcp
add action=drop chain=virus comment=transscout.trojan-2 disabled=no dst-port=\
9878 protocol=tcp
add action=drop chain=virus comment=backdoor.yai..trojan-1 disabled=no \
dst-port=2773 protocol=tcp
add action=drop chain=virus comment=backdoor.yai.trojan-2 disabled=no \
dst-port=7215 protocol=tcp
add action=drop chain=virus comment=backdoor.yai.trojan-3 disabled=no \
dst-port=54283 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-1 disabled=no dst-port=\
1003 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-2 disabled=no dst-port=\
5598 protocol=tcp
add action=drop chain=virus comment=backdoortrojan-3 disabled=no dst-port=\
5698 protocol=tcp
add action=drop chain=virus comment=schainwindlertrojan-2 disabled=no \
dst-port=31554 protocol=tcp
add action=drop chain=virus comment=shaft.ddos.trojan-1 disabled=no dst-port=\
18753 protocol=tcp
add action=drop chain=virus comment=shaft.ddos.trojan-2 disabled=no dst-port=\
20432 protocol=tcp
add action=drop chain=virus comment=devil.ddos.trojan disabled=no dst-port=\
65000 protocol=tcp
add action=drop chain=virus comment=latinustrojan-1 disabled=no dst-port=\
11831 protocol=tcp
add action=drop chain=virus comment=latinustrojan-2 disabled=no dst-port=\
29559 protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-2 disabled=no dst-port=3586 \
protocol=tcp
add action=drop chain=virus comment=snid.x2trojan-3 disabled=no dst-port=7609 \
protocol=tcp
add action=drop chain=virus comment=bionettrojan-1 disabled=no dst-port=\
12348-12349 protocol=tcp
add action=drop chain=virus comment=bionettrojan-2 disabled=no dst-port=12478 \
protocol=tcp
add action=drop chain=virus comment=worm.novarg.a.mydoom.a1. Disabled=no \
dst-port=3127 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.a.bagle.a. Disabled=no \
dst-port=6777 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.b disabled=no dst-port=8866 \
protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.c-g/j-l disabled=no \
dst-port=2745 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.p/q/r/n disabled=no \
dst-port=2556 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.m-2 disabled=no dst-port=\
20742 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.s/t/u/v disabled=no \
dst-port=4751 protocol=tcp
add action=drop chain=virus comment=worm.bbeagle.aa/ab/w/x-z-2 disabled=no \
dst-port=2535 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.r.rpcexploit disabled=no \
dst-port=5238 protocol=tcp
add action=drop chain=virus comment=worm.sasser.a disabled=no dst-port=1068 \
protocol=tcp
add action=drop chain=virus comment=worm.sasser.b/c/f disabled=no dst-port=\
5554 protocol=tcp
add action=drop chain=virus comment=worm.sasser.b/c/f disabled=no dst-port=\
9996 protocol=tcp
add action=drop chain=virus comment=worm.sasser.d disabled=no dst-port=9995 \
protocol=tcp
add action=drop chain=virus comment=worm.lovgate.a/b/c/d disabled=no \
dst-port=10168 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.v.qq disabled=no dst-port=\
20808 protocol=tcp
add action=drop chain=virus comment=worm.lovgate.f/g disabled=no dst-port=\
1092 protocol=tcp
add action=drop chain=virus comment=ndm.requester disabled=no dst-port=\
1363-1364 protocol=tcp
add action=drop chain=virus comment=hromgrafx disabled=no dst-port=1373 \
protocol=tcp
add action=drop chain=virus comment=cichainlid disabled=no dst-port=1377 \
protocol=tcp
سكربت لعمل ريبوت كل 12 ساعه يوميا يعنى مرة الصبح ومرة بالليل الساعه 10 صباحا و10 مساءا
/system scheduler
add name="reboot router daily" on-event="/system reboot" start-date=jan/01/1970 start-time=00:01:00 interval=1d comment="" disabled=no
سكربت الباك اب
/system script
add name=backup policy=ftp,reboot,read,write,policy,test,winbox,pa ssword,sniff,sensitive source=":log info \"backup beginning now\"\r\
\n:global backupfile ([/system identity get name] . \"-\" . [/system clock get time])\r\
\n/system backup save name=\$backupfile\r\
\n:log info \"backup pausing for 60s\"\r\
\n:delay 60s\r\
\n:log info \"backup being emailed\"\r\
\n/tool e-mail send to=\"
[email protected]\" subject=(\" backup winbox _ \" . [/system clock get date] . \" - \" . [/system clock get time]) file=\$backupfile\r\
\n:log info \"backup pausing for 60s\"\r\
\n:delay 60s\r\
\n/file remove \$backupfile\r\
\n:log info \"fileremoved\"\r\
\n:log info \"backup finished\""
/system scheduler
add comment="" disabled=no interval=12h name=sched_backup on-event=backup policy=ftp,reboot,read,write,policy,test,winbox,pa ssword,sniff,sensitive start-date=jan/01/1970 \
start-time=07:30:00
ضب الايميل
ويتم يدوى
اتبع الكلام ويتم الضبط يدوى
قائمة tools
نختار email
نضيف الاتى
/tools e-mail
set server=212.103.160.58
port :25
[email protected]
username="admin" password=""
جزاك الله كل خير بعد ازنك عاوز اسكربت لبروفيل قطع الخدمه نهاائي اصل عتدي النت شغال عند العميل مع اني قاطع عليه النت والرساله بتاعت قطع الخده بتظهر كل دقيقتين بس انا عاوز ميخشش خالص علي النت والرسال والصفحه تبقا قدامه علي طول