Router OS 2.9*下载安装及共享上网的教程(已更新整理另加专业防火墙设置

whxy5

Router OS 2.97下载安装及共享上网的教程(已更新整理另加专业防火墙设置)
申明：这个网上也有很多教程的。只是看到很多朋友对2.9系列共享上网防火墙哪里不怎么会设。所以我就出一个。
我也来发一个Router OS 2.97共享上网的教程
2.8系列的是稳定。不过还是来尝尝鲜，偶也用用2.9系列的。
呵呵。
送给菜鸟。
首先下载VMware Workstation
下载地址：http://www1.skycn.com/search.php
里面有几个版本。是菜鸟就下载这个汉化的：http://www1.skycn.com/soft/7584.html
下好安装后新建虚拟机：

Router OS 2.97下载
http://bbs.txwm.com/dispbbs.asp?boardID=198&ID=329899&page=1
然后把虚拟机的光驱设为使用光盘镜像文件。把地址指向你刚才下载的Router OS 2.97.ISO
启动虚拟机。按Esc键先择从光驱启动。
出现如图：
先第二个，开始安装Router OS 2.97

选择你要安装的组件。
为了学习，你可以选择全部。
然后按Ｉ，再按两次Ｙ
等一会。
提示你重启。
然后按回车。

还是先按Esc选择重光驱启动。如图。

出现如下图。按Ｃ开始破解Router OS 2.97

然后稍作等等。
出现回图１
提示你重启，按y
重启后你将看到如图２
再等出现如图３



用户:admin
密码：(空的，什么都不要输)
呵呵。
依次输入：
sys
lic
pri
你会看到：
software-id: "123s-laa"
upgradable-until:jan/01/2008
level:6
features:extra-channels
等字样。
level:6
说明破解成功。6级ＩＳＰ级别。
呵。
继续
输入：
..
..
打两点两次。
然后
setup
出现如图：
就哪就个Ｅ文，要好好学就查查字典。

按两次Ａ
回车。
设一个ＩＰ
如：192.168.0.254/24
后面的24就是你的掩码。也就是：255.255.255.0
子网掩码算法网上一大堆。自己多找找。
回车。
这里的ＩＰ设为和你本机网段一样的。
这样你就可以通过本机访问路由了。
然后按两次
x
OK
ping 一下你的机子。
你可以通过telnet web winbox等访问路由了

ＯＫ
下载winbox
Connect T 这里输入你刚才设的ＩＰ
Login:这里输admin
Password:这里先不输
点击：Connect
出现如图１

Interfaces
这里启用第二块网卡。
把两网卡的名字改一下。
比如
ether1改为wan
ether2改为lan
是学习嘛。也就是说第一个网卡就是刚才我们设了和我们所在网段一起的ＩＰ地址的哪个网卡，我们把它看做是外网。
第二块我们把它当着是内网。一会设ＩＰ的时候把它设成另一个网段的。比如：192.168.5.1
第二块网卡启用
点击IP-Address
点＋号
增加一个ＩＰ地址，下面选第二张网卡，
如果你改了哪就是选Lan
我没改所以我选的看上去是ether2。如图

点击winbox上的
IP-Routes
点击＋号。
增加一个网关。这个网关就是外网给你的哪个。在这里也就是你机子用的哪个网关。我们设的外网就是你的内网嘛。
如图

点击winbox上的IP- Firewall
选择NAT
点＋号
选择Action
Action:选masquerade
OK
如下图

继续选择：Mangle
点击＋号
General
Chain:选择postrouting
Protocol:选择6（tcp）
如图1
点：Advanced
TCP Flags
TCP Lags选择syn
如图２
选择Action
Action选择change MSS
New TCP MSS:输入：1400
点击ＯＫ
现在可以找一台机子。
把ＩＰ改为192.168.5.0　看你的情况。也就是改为刚才你所设的第二块网卡的网段。试试能不能上网吧。呵呵。



然后点winbox上 New Terminal
出现如图1
然后把以下内容复制下来。
注意：不要一次复制。第一次你可以复制5行。以后每次复制5行。
然后在Terminal 窗口里点击右键
选择pasta
呵呵。回车。
继续每五行一次这样复制进来。
如图2
然后点击IP-Firewall
选择Filter Rules
看到什么了。简单吧。下面的专业防火墙是网盟一位兄弟发的，具体你用得到什么你还要选择一下。
感谢网盟的兄弟提供的好东西，以上内容我只是整理了一下。
/ ip firewall filter
ad ch input pr tcp dst-po 82 act drop comm Worm.NetSky.Y@mm
ad ch input pr tcp dst-po 113 act drop comm W32.Korgo.A/B/C/D/E/F-1
ad ch input pr tcp dst-po 2041 act drop comm W33.Korgo.A/B/C/D/E/F-2
ad ch input pr tcp dst-po 3067 act drop comm W32.Korgo.A/B/C/D/E/F-3
ad ch input pr tcp dst-po 6667 act drop comm W32.Korgo.A/B/C/D/E/F-4
ad ch input pr tcp dst-po 445 act drop comm W32.Korgo.A/B/C/D/E/F-5660
ad ch input pr tcp dst-po 1000-1001 act drop comm Backdoor.Nibu.B-1
ad ch input pr tcp dst-po 2283 act drop comm Backdoor.Nibu.B-2
ad ch input pr tcp dst-po 10000 act drop comm Backdoor.Nibu.E/G/H
ad ch input pr tcp dst-po 3422 act drop comm Backdoor.IRC.Aladinz.R-1
ad ch input pr tcp dst-po 43958 act drop comm Backdoor.IRC.Aladinz.R-2
ad ch input pr tcp dst-po 5554 act drop comm W32.Dabber.A/B-1
ad ch input pr tcp dst-po 8967 act drop comm W32.Dabber.A/B-2
ad ch input pr tcp dst-po 9898-9999 act drop comm W32.Dabber.A/B-3
ad ch input pr tcp dst-po 6789 act drop comm Worm.NetSky.S/T/U@mm
ad ch input pr tcp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-1
ad ch input pr tcp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-2
ad ch input pr tcp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-3
ad ch input pr tcp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-4
ad ch input pr tcp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-5
ad ch input pr tcp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-1
ad ch input pr tcp dst-po 20034 act drop comm Block.NetBus.Trojan-2
ad ch input pr tcp dst-po 21554 act drop comm GirlFriend.Trojan-1
ad ch input pr tcp dst-po 41 act drop comm DeepThroat.Trojan-1
ad ch input pr tcp dst-po 3150 act drop comm DeepThroat.Trojan-2
ad ch input pr tcp dst-po 999 act drop comm DeepThroat.Trojan-3
ad ch input pr tcp dst-po 6670 act drop comm DeepThroat.Trojan-4
ad ch input pr tcp dst-po 6771 act drop comm DeepThroat.Trojan-5
ad ch input pr tcp dst-po 60000 act drop comm DeepThroat.Trojan-6
ad ch input pr tcp dst-po 2140 act drop comm DeepThroat.Trojan-7
ad ch input pr tcp dst-po 10067 act drop comm Portal.of.Doom.Trojan-1
ad ch input pr tcp dst-po 10167 act drop comm Portal.of.Doom.Trojan-2
ad ch input pr tcp dst-po 3700 act drop comm Portal.of.Doom.Trojan-3
ad ch input pr tcp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-4
ad ch input pr tcp dst-po 6883 act drop comm Delta.Source.Trojan-1
ad ch input pr tcp dst-po 26274 act drop comm Delta.Source.Trojan-2
ad ch input pr tcp dst-po 4444 act drop comm Delta.Source.Trojan-3
ad ch input pr tcp dst-po 47262 act drop comm Delta.Source.Trojan-4
ad ch input pr tcp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr tcp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr tcp dst-po 65390 act drop comm Eclypse.Trojan-3
ad ch input pr tcp dst-po 5880-5882 act drop comm Y3K.RAT.Trojan-1
ad ch input pr tcp dst-po 5888-5889 act drop comm Y3K.RAT.Trojan-2
ad ch input pr tcp dst-po 30100-30103 act drop comm NetSphere.Trojan-1
ad ch input pr tcp dst-po 30133 act drop comm NetSphere.Trojan-2
ad ch input pr tcp dst-po 7300-7301 act drop comm NetMonitor.Trojan-1
ad ch input pr tcp dst-po 7306-7308 act drop comm NetMonitor.Trojan-2
ad ch input pr tcp dst-po 79 act drop comm FireHotcker.Trojan-1
ad ch input pr tcp dst-po 5031 act drop comm FireHotcker.Trojan-2
ad ch input pr tcp dst-po 5321 act drop comm FireHotcker.Trojan-3
ad ch input pr tcp dst-po 6400 act drop comm TheThing.Trojan-1
ad ch input pr tcp dst-po 7777 act drop comm TheThing.Trojan-2
ad ch input pr tcp dst-po 1047 act drop comm GateCrasher.Trojan-1
ad ch input pr tcp dst-po 6969-6970 act drop comm GateCrasher.Trojan-2
ad ch input pr tcp dst-po 2774 act drop comm SubSeven-1
ad ch input pr tcp dst-po 27374 act drop comm SubSeven-2
ad ch input pr tcp dst-po 1243 act drop comm SubSeven-3
ad ch input pr tcp dst-po 1234 act drop comm SubSeven-4
ad ch input pr tcp dst-po 6711-6713 act drop comm SubSeven-5
ad ch input pr tcp dst-po 16959 act drop comm SubSeven-7
ad ch input pr tcp dst-po 11000 act drop comm Senna.Spy.Trojan-1
ad ch input pr tcp dst-po 13000 act drop comm Senna.Spy.Trojan-2
ad ch input pr tcp dst-po 25685-25686 act drop comm Moonpie.Trojan-1
ad ch input pr tcp dst-po 25982 act drop comm Moonpie.Trojan-2
ad ch input pr tcp dst-po 1024-1030 act drop comm NetSpy.Trojan-1
ad ch input pr tcp dst-po 1033 act drop comm NetSpy.Trojan-2
ad ch input pr tcp dst-po 31337-31339 act drop comm NetSpy.Trojan-3
ad ch input pr tcp dst-po 8102 act drop comm Trojan
ad ch input pr tcp dst-po 7306 act drop comm Netspy3.0Trojan
ad ch input pr tcp dst-po 8011 act drop comm WAY.Trojan
ad ch input pr tcp dst-po 7626 act drop comm Trojan.BingHe
ad ch input pr tcp dst-po 19191 act drop comm Trojan.NianSeHoYian
ad ch input pr tcp dst-po 23444-23445 act drop comm NetBull.Trojan
ad ch input pr tcp dst-po 2583 act drop comm WinCrash.Trojan-1
ad ch input pr tcp dst-po 3024 act drop comm WinCrash.Trojan-2
ad ch input pr tcp dst-po 4092 act drop comm WinCrash.Trojan-3
ad ch input pr tcp dst-po 5714 act drop comm WinCrash.Trojan-4
ad ch input pr tcp dst-po 1010-1012 act drop comm Doly1.0/1.35/1.5trojan-1
ad ch input pr tcp dst-po 1015 act drop comm Doly1.0/1.35/1.5trojan-2
ad ch input pr tcp dst-po 1999-2005 act drop comm TransScout.Trojan-1
ad ch input pr tcp dst-po 9878 act drop comm TransScout.Trojan-2
ad ch input pr tcp dst-po 2773 act drop comm Backdoor.YAI..Trojan-1
ad ch input pr tcp dst-po 7215 act drop comm Backdoor.YAI.Trojan-2
ad ch input pr tcp dst-po 54283 act drop comm Backdoor.YAI.Trojan-3
ad ch input pr tcp dst-po 1003 act drop comm BackDoorTrojan-1
ad ch input pr tcp dst-po 5598 act drop comm BackDoorTrojan-2
ad ch input pr tcp dst-po 5698 act drop comm BackDoorTrojan-3
ad ch input pr tcp dst-po 2716 act drop comm PrayerTrojan-1
ad ch input pr tcp dst-po 9999 act drop comm PrayerTrojan-2
ad ch input pr tcp dst-po 21544 act drop comm SchwindlerTrojan-1
ad ch input pr tcp dst-po 31554 act drop comm SchwindlerTrojan-2
ad ch input pr tcp dst-po 18753 act drop comm Shaft.DDoS.Trojan-1
ad ch input pr tcp dst-po 20432 act drop comm Shaft.DDoS.Trojan-2
ad ch input pr tcp dst-po 65000 act drop comm Devil.DDoS.Trojan
ad ch input pr tcp dst-po 11831 act drop comm LatinusTrojan-1
ad ch input pr tcp dst-po 29559 act drop comm LatinusTrojan-2
ad ch input pr tcp dst-po 1784 act drop comm Snid.X2Trojan-1
ad ch input pr tcp dst-po 3586 act drop comm Snid.X2Trojan-2
ad ch input pr tcp dst-po 7609 act drop comm Snid.X2Trojan-3
ad ch input pr tcp dst-po 12348-12349 act drop comm BionetTrojan-1
ad ch input pr tcp dst-po 12478 act drop comm BionetTrojan-2
ad ch input pr tcp dst-po 57922 act drop comm BionetTrojan-3
ad ch input pr tcp dst-po 3127-3198 act drop comm Worm.Novarg.a.Mydoom.a.-1
ad ch input pr tcp dst-po 4444 act drop comm Worm.MsBlaster-1
ad ch input pr tcp dst-po 6777 act drop comm Worm.BBeagle.a.Bagle.a.
ad ch input pr tcp dst-po 8866 act drop comm Worm.BBeagle.b
ad ch input pr tcp dst-po 2745 act drop comm Worm.BBeagle.c-g/j-l
ad ch input pr tcp dst-po 2556 act drop comm Worm.BBeagle.p/q/r/n
ad ch input pr tcp dst-po 20742 act drop comm Worm.BBEagle.m-2
ad ch input pr tcp dst-po 4751 act drop comm Worm.BBeagle.s/t/u/v
ad ch input pr tcp dst-po 2535 act drop comm Worm.BBeagle.aa/ab/w/x-z-2
ad ch input pr tcp dst-po 5238 act drop comm Worm.LovGate.r.RpcExploit
ad ch input pr tcp dst-po 1068 act drop comm Worm.Sasser.a
ad ch input pr tcp dst-po 5554 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 9996 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 9995 act drop comm Worm.Sasser.d
ad ch input pr tcp dst-po 10168 act drop comm Worm.Lovgate.a/b/c/d
ad ch input pr tcp dst-po 20808 act drop comm Worm.Lovgate.v.QQ
ad ch input pr tcp dst-po 1092 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 20168 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 1363-1364 act drop comm ndm.requester
ad ch input pr tcp dst-po 1368 act drop comm screen.cast
ad ch input pr tcp dst-po 1373 act drop comm hromgrafx
ad ch input pr tcp dst-po 1377 act drop comm cichlid
ad ch input pr tcp dst-po 3410 act drop comm Backdoor.OptixPro
ad ch input pr tcp dst-po 135-139 act drop
ad ch input pr tcp dst-po 7000 act drop
add chain=input protocol=tcp dst-port=69 action=drop
add chain=input protocol=tcp dst-port=161-162 action=drop
add chain=input protocol=tcp dst-port=52 action=drop
add chain=input protocol=tcp dst-port=54 action=drop
add chain=input protocol=tcp dst-port=416 action=drop
add chain=input protocol=tcp dst-port=420 action=drop
add chain=input protocol=tcp dst-port=514 action=drop
add chain=input protocol=tcp dst-port=555 action=drop
add chain=input protocol=tcp dst-port=559 action=drop
add chain=input protocol=tcp dst-port=666 action=drop
add chain=input protocol=tcp dst-port=669 action=drop
add chain=input protocol=tcp dst-port=743 action=drop
add chain=input protocol=udp dst-port=743 action=drop
add chain=input protocol=tcp dst-port=901 action=drop
add chain=input protocol=tcp dst-port=1013 action=drop
add chain=input protocol=tcp dst-port=1042 action=drop
add chain=input protocol=tcp dst-port=1203 action=drop
add chain=input protocol=tcp dst-port=1088 action=drop
add chain=input protocol=tcp dst-port=1111 action=drop
add chain=input protocol=tcp dst-port=1234 action=drop
add chain=input protocol=tcp dst-port=1241 action=drop
add chain=input protocol=tcp dst-port=1243 action=drop
add chain=input protocol=tcp dst-port=1433 action=drop
add chain=input protocol=tcp dst-port=2022 action=drop
add chain=input protocol=tcp dst-port=2023 action=drop
add chain=input protocol=tcp dst-port=3000 action=drop
add chain=input protocol=tcp dst-port=3332 action=drop
add chain=input protocol=tcp dst-port=4006 action=drop
add chain=input protocol=tcp dst-port=4889 action=drop
add chain=input protocol=tcp dst-port=5800 action=drop
add chain=input protocol=tcp dst-port=5900 action=drop
add chain=input protocol=tcp dst-port=6129 action=drop
add chain=input protocol=tcp dst-port=6267 action=drop
add chain=input protocol=tcp dst-port=6720 action=drop
add chain=input protocol=tcp dst-port=7000-7001 action=drop
add chain=input protocol=tcp dst-port=7306 action=drop
add chain=input protocol=tcp dst-port=8000 action=drop
add chain=input protocol=tcp dst-port=8888 action=drop
add chain=input protocol=tcp dst-port=11927 action=drop
add chain=input protocol=tcp dst-port=15804 action=drop
add chain=input protocol=tcp dst-port=16660 action=drop
add chain=input protocol=tcp dst-port=16661 action=drop
add chain=input protocol=tcp dst-port=17300 action=drop
add chain=forward protocol=tcp src-port=5354 action=drop
add chain=forward protocol=tcp src-port=9000 action=drop
add chain=forward protocol=tcp src-port=9099 action=drop
add chain=input protocol=tcp dst-port=1080 action=drop
add chain=input protocol=tcp dst-port=5554 action=drop
add chain=input protocol=tcp dst-port=8866 action=drop
add chain=input protocol=tcp dst-port=65506 action=drop
add chain=input protocol=tcp dst-port=593 act drop
add chain=input protocol=tcp dst-port=1214 act drop
ad ch input pr udp dst-po 135-139 act drop
ad ch input pr udp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-6
ad ch input pr udp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-7
ad ch input pr udp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-8
ad ch input pr udp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-9
ad ch input pr udp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-10
ad ch input pr udp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-3
ad ch input pr udp dst-po 20034 act drop comm Block.NetBus.Trojan-4
ad ch input pr udp dst-po 21554 act drop comm GirlFriend.Trojan-2
ad ch input pr udp dst-po 41 act drop comm DeepThroat.Trojan-8
ad ch input pr udp dst-po 3150 act drop comm DeepThroat.Trojan-9
ad ch input pr udp dst-po 999 act drop comm DeepThroat.Trojan-10
ad ch input pr udp dst-po 6670 act drop comm DeepThroat.Trojan-11
ad ch input pr udp dst-po 6771 act drop comm DeepThroat.Trojan-12
ad ch input pr udp dst-po 60000 act drop comm DeepThroat.Trojan-13
ad ch input pr udp dst-po 10067 act drop comm Portal.of.Doom.Trojan-5
ad ch input pr udp dst-po 10167 act drop comm Portal.of.Doom.Trojan-6
ad ch input pr udp dst-po 3700 act drop comm Portal.of.Doom.Trojan-7
ad ch input pr udp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-8
ad ch input pr udp dst-po 6883 act drop comm Delta.Source.Trojan-5
ad ch input pr udp dst-po 26274 act drop comm Delta.Source.Trojan-6
ad ch input pr udp dst-po 44444 act drop comm Delta.Source.Trojan-7
ad ch input pr udp dst-po 47262 act drop comm Delta.Source.Trojan-8
ad ch input pr udp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr udp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr udp dst-po 5880-5882 act drop comm Eclypse.Trojan-3
ad ch input pr udp dst-po 5888-5889 act drop comm Eclypse.Trojan-4
ad ch input pr udp dst-po 34555 act drop comm Trin00.DDoS.Trojan-1
ad ch input pr udp dst-po 35555 act drop comm Trin00.DDoS.Trojan-2
ad ch input pr udp dst-po 31338 act drop comm NetSpy.DK.Trojan-1
ad ch input pr udp dst-po 69 act drop comm Worm.MsBlaster-2
ad ch input pr udp dst-po 123 act drop comm Worm.Sobig.f-1
ad ch input pr udp dst-po 995-999 act drop comm Worm.Sobig.f-2
ad ch input pr udp dst-po 8998 act drop comm Worm.Sobig.f-3
ad ch input pr udp dst-po 79 act drop
ad ch input pr udp dst-po 1024-1030 act drop
ad ch output pr tcp dst-po 1029 act drop
ad ch input pr udp dst-po 1000-1001 act drop
ad ch input pr udp dst-po 5238 act drop
ad ch input pr udp dst-po 445 act drop
ad ch input pr udp dst-po 9898-9999 act drop
ad ch input pr udp dst-po 4444 act drop
ad ch input pr udp dst-po 10000 act drop
ad ch input pr udp dst-po 7000 act drop
add chain=input protocol=udp dst-port=1433-1434 action=drop
add chain=input protocol=udp dst-port=1900 action=drop
add chain=input protocol=udp dst-port=161-162 action=drop
add chain=input protocol=udp dst-port=555 action=drop
add chain=input protocol=udp dst-port=15804 action=drop
add chain=input protocol=udp dst-port=11927 action=drop
add chain=input protocol=udp dst-port=8888 action=drop
add chain=input protocol=udp dst-port=8000 action=drop
add chain=input protocol=udp dst-port=8225 action=drop
add chain=input protocol=udp dst-port=7306 action=drop
add chain=input protocol=udp dst-port=6720 action=drop
add chain=input protocol=udp dst-port=6267 action=drop
add chain=input protocol=udp dst-port=6129 action=drop
add chain=input protocol=udp dst-port=5900 action=drop
add chain=input protocol=udp dst-port=5800 action=drop
add chain=input protocol=udp dst-port=2023 action=drop
add chain=input protocol=udp dst-port=1203 action=drop
add chain=input protocol=udp dst-port=1042 action=drop
add chain=input protocol=udp dst-port=995 action=drop
add chain=input protocol=udp dst-port=996-999 action=drop
add chain=input protocol=udp dst-port=420 action=drop
add chain=output protocol=udp dst-port=67-68 action=drop
add chain=input protocol=udp dst-port=416 action=drop


以下是防火墙部分
/ ip firewall filter
ad ch input pr tcp dst-po 82 act drop comm Worm.NetSky.Y@mm
ad ch input pr tcp dst-po 113 act drop comm W32.Korgo.A/B/C/D/E/F-1
ad ch input pr tcp dst-po 2041 act drop comm W33.Korgo.A/B/C/D/E/F-2
ad ch input pr tcp dst-po 3067 act drop comm W32.Korgo.A/B/C/D/E/F-3
ad ch input pr tcp dst-po 6667 act drop comm W32.Korgo.A/B/C/D/E/F-4
ad ch input pr tcp dst-po 445 act drop comm W32.Korgo.A/B/C/D/E/F-5660
ad ch input pr tcp dst-po 1000-1001 act drop comm Backdoor.Nibu.B-1
ad ch input pr tcp dst-po 2283 act drop comm Backdoor.Nibu.B-2
ad ch input pr tcp dst-po 10000 act drop comm Backdoor.Nibu.E/G/H
ad ch input pr tcp dst-po 3422 act drop comm Backdoor.IRC.Aladinz.R-1
ad ch input pr tcp dst-po 43958 act drop comm Backdoor.IRC.Aladinz.R-2
ad ch input pr tcp dst-po 5554 act drop comm W32.Dabber.A/B-1
ad ch input pr tcp dst-po 8967 act drop comm W32.Dabber.A/B-2
ad ch input pr tcp dst-po 9898-9999 act drop comm W32.Dabber.A/B-3
ad ch input pr tcp dst-po 6789 act drop comm Worm.NetSky.S/T/U@mm
ad ch input pr tcp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-1
ad ch input pr tcp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-2
ad ch input pr tcp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-3
ad ch input pr tcp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-4
ad ch input pr tcp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-5
ad ch input pr tcp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-1
ad ch input pr tcp dst-po 20034 act drop comm Block.NetBus.Trojan-2
ad ch input pr tcp dst-po 21554 act drop comm GirlFriend.Trojan-1
ad ch input pr tcp dst-po 41 act drop comm DeepThroat.Trojan-1
ad ch input pr tcp dst-po 3150 act drop comm DeepThroat.Trojan-2
ad ch input pr tcp dst-po 999 act drop comm DeepThroat.Trojan-3
ad ch input pr tcp dst-po 6670 act drop comm DeepThroat.Trojan-4
ad ch input pr tcp dst-po 6771 act drop comm DeepThroat.Trojan-5
ad ch input pr tcp dst-po 60000 act drop comm DeepThroat.Trojan-6
ad ch input pr tcp dst-po 2140 act drop comm DeepThroat.Trojan-7
ad ch input pr tcp dst-po 10067 act drop comm Portal.of.Doom.Trojan-1
ad ch input pr tcp dst-po 10167 act drop comm Portal.of.Doom.Trojan-2
ad ch input pr tcp dst-po 3700 act drop comm Portal.of.Doom.Trojan-3
ad ch input pr tcp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-4
ad ch input pr tcp dst-po 6883 act drop comm Delta.Source.Trojan-1
ad ch input pr tcp dst-po 26274 act drop comm Delta.Source.Trojan-2
ad ch input pr tcp dst-po 4444 act drop comm Delta.Source.Trojan-3
ad ch input pr tcp dst-po 47262 act drop comm Delta.Source.Trojan-4
ad ch input pr tcp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr tcp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr tcp dst-po 65390 act drop comm Eclypse.Trojan-3
ad ch input pr tcp dst-po 5880-5882 act drop comm Y3K.RAT.Trojan-1
ad ch input pr tcp dst-po 5888-5889 act drop comm Y3K.RAT.Trojan-2
ad ch input pr tcp dst-po 30100-30103 act drop comm NetSphere.Trojan-1
ad ch input pr tcp dst-po 30133 act drop comm NetSphere.Trojan-2
ad ch input pr tcp dst-po 7300-7301 act drop comm NetMonitor.Trojan-1
ad ch input pr tcp dst-po 7306-7308 act drop comm NetMonitor.Trojan-2
ad ch input pr tcp dst-po 79 act drop comm FireHotcker.Trojan-1
ad ch input pr tcp dst-po 5031 act drop comm FireHotcker.Trojan-2
ad ch input pr tcp dst-po 5321 act drop comm FireHotcker.Trojan-3
ad ch input pr tcp dst-po 6400 act drop comm TheThing.Trojan-1
ad ch input pr tcp dst-po 7777 act drop comm TheThing.Trojan-2
ad ch input pr tcp dst-po 1047 act drop comm GateCrasher.Trojan-1
ad ch input pr tcp dst-po 6969-6970 act drop comm GateCrasher.Trojan-2
ad ch input pr tcp dst-po 2774 act drop comm SubSeven-1
ad ch input pr tcp dst-po 27374 act drop comm SubSeven-2
ad ch input pr tcp dst-po 1243 act drop comm SubSeven-3
ad ch input pr tcp dst-po 1234 act drop comm SubSeven-4
ad ch input pr tcp dst-po 6711-6713 act drop comm SubSeven-5
ad ch input pr tcp dst-po 16959 act drop comm SubSeven-7
ad ch input pr tcp dst-po 11000 act drop comm Senna.Spy.Trojan-1
ad ch input pr tcp dst-po 13000 act drop comm Senna.Spy.Trojan-2
ad ch input pr tcp dst-po 25685-25686 act drop comm Moonpie.Trojan-1
ad ch input pr tcp dst-po 25982 act drop comm Moonpie.Trojan-2
ad ch input pr tcp dst-po 1024-1030 act drop comm NetSpy.Trojan-1
ad ch input pr tcp dst-po 1033 act drop comm NetSpy.Trojan-2
ad ch input pr tcp dst-po 31337-31339 act drop comm NetSpy.Trojan-3
ad ch input pr tcp dst-po 8102 act drop comm Trojan
ad ch input pr tcp dst-po 7306 act drop comm Netspy3.0Trojan
ad ch input pr tcp dst-po 8011 act drop comm WAY.Trojan
ad ch input pr tcp dst-po 7626 act drop comm Trojan.BingHe
ad ch input pr tcp dst-po 19191 act drop comm Trojan.NianSeHoYian
ad ch input pr tcp dst-po 23444-23445 act drop comm NetBull.Trojan
ad ch input pr tcp dst-po 2583 act drop comm WinCrash.Trojan-1
ad ch input pr tcp dst-po 3024 act drop comm WinCrash.Trojan-2
ad ch input pr tcp dst-po 4092 act drop comm WinCrash.Trojan-3
ad ch input pr tcp dst-po 5714 act drop comm WinCrash.Trojan-4
ad ch input pr tcp dst-po 1010-1012 act drop comm Doly1.0/1.35/1.5trojan-1
ad ch input pr tcp dst-po 1015 act drop comm Doly1.0/1.35/1.5trojan-2
ad ch input pr tcp dst-po 1999-2005 act drop comm TransScout.Trojan-1
ad ch input pr tcp dst-po 9878 act drop comm TransScout.Trojan-2
ad ch input pr tcp dst-po 2773 act drop comm Backdoor.YAI..Trojan-1
ad ch input pr tcp dst-po 7215 act drop comm Backdoor.YAI.Trojan-2
ad ch input pr tcp dst-po 54283 act drop comm Backdoor.YAI.Trojan-3
ad ch input pr tcp dst-po 1003 act drop comm BackDoorTrojan-1
ad ch input pr tcp dst-po 5598 act drop comm BackDoorTrojan-2
ad ch input pr tcp dst-po 5698 act drop comm BackDoorTrojan-3
ad ch input pr tcp dst-po 2716 act drop comm PrayerTrojan-1
ad ch input pr tcp dst-po 9999 act drop comm PrayerTrojan-2
ad ch input pr tcp dst-po 21544 act drop comm SchwindlerTrojan-1
ad ch input pr tcp dst-po 31554 act drop comm SchwindlerTrojan-2
ad ch input pr tcp dst-po 18753 act drop comm Shaft.DDoS.Trojan-1
ad ch input pr tcp dst-po 20432 act drop comm Shaft.DDoS.Trojan-2
ad ch input pr tcp dst-po 65000 act drop comm Devil.DDoS.Trojan
ad ch input pr tcp dst-po 11831 act drop comm LatinusTrojan-1
ad ch input pr tcp dst-po 29559 act drop comm LatinusTrojan-2
ad ch input pr tcp dst-po 1784 act drop comm Snid.X2Trojan-1
ad ch input pr tcp dst-po 3586 act drop comm Snid.X2Trojan-2
ad ch input pr tcp dst-po 7609 act drop comm Snid.X2Trojan-3
ad ch input pr tcp dst-po 12348-12349 act drop comm BionetTrojan-1
ad ch input pr tcp dst-po 12478 act drop comm BionetTrojan-2
ad ch input pr tcp dst-po 57922 act drop comm BionetTrojan-3
ad ch input pr tcp dst-po 3127-3198 act drop comm Worm.Novarg.a.Mydoom.a.-1
ad ch input pr tcp dst-po 4444 act drop comm Worm.MsBlaster-1
ad ch input pr tcp dst-po 6777 act drop comm Worm.BBeagle.a.Bagle.a.
ad ch input pr tcp dst-po 8866 act drop comm Worm.BBeagle.b
ad ch input pr tcp dst-po 2745 act drop comm Worm.BBeagle.c-g/j-l
ad ch input pr tcp dst-po 2556 act drop comm Worm.BBeagle.p/q/r/n
ad ch input pr tcp dst-po 20742 act drop comm Worm.BBEagle.m-2
ad ch input pr tcp dst-po 4751 act drop comm Worm.BBeagle.s/t/u/v
ad ch input pr tcp dst-po 2535 act drop comm Worm.BBeagle.aa/ab/w/x-z-2
ad ch input pr tcp dst-po 5238 act drop comm Worm.LovGate.r.RpcExploit
ad ch input pr tcp dst-po 1068 act drop comm Worm.Sasser.a
ad ch input pr tcp dst-po 5554 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 9996 act drop comm Worm.Sasser.b/c/f
ad ch input pr tcp dst-po 9995 act drop comm Worm.Sasser.d
ad ch input pr tcp dst-po 10168 act drop comm Worm.Lovgate.a/b/c/d
ad ch input pr tcp dst-po 20808 act drop comm Worm.Lovgate.v.QQ
ad ch input pr tcp dst-po 1092 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 20168 act drop comm Worm.Lovgate.f/g
ad ch input pr tcp dst-po 1363-1364 act drop comm ndm.requester
ad ch input pr tcp dst-po 1368 act drop comm screen.cast
ad ch input pr tcp dst-po 1373 act drop comm hromgrafx
ad ch input pr tcp dst-po 1377 act drop comm cichlid
ad ch input pr tcp dst-po 3410 act drop comm Backdoor.OptixPro
ad ch input pr tcp dst-po 135-139 act drop
ad ch input pr tcp dst-po 7000 act drop
add chain=input protocol=tcp dst-port=69 action=drop
add chain=input protocol=tcp dst-port=161-162 action=drop
add chain=input protocol=tcp dst-port=52 action=drop
add chain=input protocol=tcp dst-port=54 action=drop
add chain=input protocol=tcp dst-port=416 action=drop
add chain=input protocol=tcp dst-port=420 action=drop
add chain=input protocol=tcp dst-port=514 action=drop
add chain=input protocol=tcp dst-port=555 action=drop
add chain=input protocol=tcp dst-port=559 action=drop
add chain=input protocol=tcp dst-port=666 action=drop
add chain=input protocol=tcp dst-port=669 action=drop
add chain=input protocol=tcp dst-port=743 action=drop
add chain=input protocol=udp dst-port=743 action=drop
add chain=input protocol=tcp dst-port=901 action=drop
add chain=input protocol=tcp dst-port=1013 action=drop
add chain=input protocol=tcp dst-port=1042 action=drop
add chain=input protocol=tcp dst-port=1203 action=drop
add chain=input protocol=tcp dst-port=1088 action=drop
add chain=input protocol=tcp dst-port=1111 action=drop
add chain=input protocol=tcp dst-port=1234 action=drop
add chain=input protocol=tcp dst-port=1241 action=drop
add chain=input protocol=tcp dst-port=1243 action=drop
add chain=input protocol=tcp dst-port=1433 action=drop
add chain=input protocol=tcp dst-port=2022 action=drop
add chain=input protocol=tcp dst-port=2023 action=drop
add chain=input protocol=tcp dst-port=3000 action=drop
add chain=input protocol=tcp dst-port=3332 action=drop
add chain=input protocol=tcp dst-port=4006 action=drop
add chain=input protocol=tcp dst-port=4889 action=drop
add chain=input protocol=tcp dst-port=5800 action=drop
add chain=input protocol=tcp dst-port=5900 action=drop
add chain=input protocol=tcp dst-port=6129 action=drop
add chain=input protocol=tcp dst-port=6267 action=drop
add chain=input protocol=tcp dst-port=6720 action=drop
add chain=input protocol=tcp dst-port=7000-7001 action=drop
add chain=input protocol=tcp dst-port=7306 action=drop
add chain=input protocol=tcp dst-port=8000 action=drop
add chain=input protocol=tcp dst-port=8888 action=drop
add chain=input protocol=tcp dst-port=11927 action=drop
add chain=input protocol=tcp dst-port=15804 action=drop
add chain=input protocol=tcp dst-port=16660 action=drop
add chain=input protocol=tcp dst-port=16661 action=drop
add chain=input protocol=tcp dst-port=17300 action=drop
add chain=forward protocol=tcp src-port=5354 action=drop
add chain=forward protocol=tcp src-port=9000 action=drop
add chain=forward protocol=tcp src-port=9099 action=drop
add chain=input protocol=tcp dst-port=1080 action=drop
add chain=input protocol=tcp dst-port=5554 action=drop
add chain=input protocol=tcp dst-port=8866 action=drop
add chain=input protocol=tcp dst-port=65506 action=drop
add chain=input protocol=tcp dst-port=593 act drop
add chain=input protocol=tcp dst-port=1214 act drop
ad ch input pr udp dst-po 135-139 act drop
ad ch input pr udp dst-po 8787 act drop comm Back.Orifice.2000.Trojan-6
ad ch input pr udp dst-po 8879 act drop comm Back.Orifice.2000.Trojan-7
ad ch input pr udp dst-po 31666 act drop comm Back.Orifice.2000.Trojan-8
ad ch input pr udp dst-po 31337-31338 act drop comm Back.Orifice.2000.Trojan-9
ad ch input pr udp dst-po 54320-54321 act drop comm Back.Orifice.2000.Trojan-10
ad ch input pr udp dst-po 12345-12346 act drop comm Block.NetBus.Trojan-3
ad ch input pr udp dst-po 20034 act drop comm Block.NetBus.Trojan-4
ad ch input pr udp dst-po 21554 act drop comm GirlFriend.Trojan-2
ad ch input pr udp dst-po 41 act drop comm DeepThroat.Trojan-8
ad ch input pr udp dst-po 3150 act drop comm DeepThroat.Trojan-9
ad ch input pr udp dst-po 999 act drop comm DeepThroat.Trojan-10
ad ch input pr udp dst-po 6670 act drop comm DeepThroat.Trojan-11
ad ch input pr udp dst-po 6771 act drop comm DeepThroat.Trojan-12
ad ch input pr udp dst-po 60000 act drop comm DeepThroat.Trojan-13
ad ch input pr udp dst-po 10067 act drop comm Portal.of.Doom.Trojan-5
ad ch input pr udp dst-po 10167 act drop comm Portal.of.Doom.Trojan-6
ad ch input pr udp dst-po 3700 act drop comm Portal.of.Doom.Trojan-7
ad ch input pr udp dst-po 9872-9875 act drop comm Portal.of.Doom.Trojan-8
ad ch input pr udp dst-po 6883 act drop comm Delta.Source.Trojan-5
ad ch input pr udp dst-po 26274 act drop comm Delta.Source.Trojan-6
ad ch input pr udp dst-po 44444 act drop comm Delta.Source.Trojan-7
ad ch input pr udp dst-po 47262 act drop comm Delta.Source.Trojan-8
ad ch input pr udp dst-po 3791 act drop comm Eclypse.Trojan-1
ad ch input pr udp dst-po 3801 act drop comm Eclypse.Trojan-2
ad ch input pr udp dst-po 5880-5882 act drop comm Eclypse.Trojan-3
ad ch input pr udp dst-po 5888-5889 act drop comm Eclypse.Trojan-4
ad ch input pr udp dst-po 34555 act drop comm Trin00.DDoS.Trojan-1
ad ch input pr udp dst-po 35555 act drop comm Trin00.DDoS.Trojan-2
ad ch input pr udp dst-po 31338 act drop comm NetSpy.DK.Trojan-1
ad ch input pr udp dst-po 69 act drop comm Worm.MsBlaster-2
ad ch input pr udp dst-po 123 act drop comm Worm.Sobig.f-1
ad ch input pr udp dst-po 995-999 act drop comm Worm.Sobig.f-2
ad ch input pr udp dst-po 8998 act drop comm Worm.Sobig.f-3
ad ch input pr udp dst-po 79 act drop
ad ch input pr udp dst-po 1024-1030 act drop
ad ch output pr tcp dst-po 1029 act drop
ad ch input pr udp dst-po 1000-1001 act drop
ad ch input pr udp dst-po 5238 act drop
ad ch input pr udp dst-po 445 act drop
ad ch input pr udp dst-po 9898-9999 act drop
ad ch input pr udp dst-po 4444 act drop
ad ch input pr udp dst-po 10000 act drop
ad ch input pr udp dst-po 7000 act drop
add chain=input protocol=udp dst-port=1433-1434 action=drop
add chain=input protocol=udp dst-port=1900 action=drop
add chain=input protocol=udp dst-port=161-162 action=drop
add chain=input protocol=udp dst-port=555 action=drop
add chain=input protocol=udp dst-port=15804 action=drop
add chain=input protocol=udp dst-port=11927 action=drop
add chain=input protocol=udp dst-port=8888 action=drop
add chain=input protocol=udp dst-port=8000 action=drop
add chain=input protocol=udp dst-port=8225 action=drop
add chain=input protocol=udp dst-port=7306 action=drop
add chain=input protocol=udp dst-port=6720 action=drop
add chain=input protocol=udp dst-port=6267 action=drop
add chain=input protocol=udp dst-port=6129 action=drop
add chain=input protocol=udp dst-port=5900 action=drop
add chain=input protocol=udp dst-port=5800 action=drop
add chain=input protocol=udp dst-port=2023 action=drop
add chain=input protocol=udp dst-port=1203 action=drop
add chain=input protocol=udp dst-port=1042 action=drop
add chain=input protocol=udp dst-port=995 action=drop
add chain=input protocol=udp dst-port=996-999 action=drop
add chain=input protocol=udp dst-port=420 action=drop
add chain=output protocol=udp dst-port=67-68 action=drop
add chain=input protocol=udp dst-port=416 action=drop
呵呵。
把这个粘进去就ＯＫ啦。
照图做就ＯＫ！！

导入后就如图所示了。

具体的介绍和图片可以下载看：
下载地址1：
http://www.fs2you.com/files/50097cf5-ec11-11dc-9b33-0014221f3995/

[/url]
[url=http://img.blog.163.com/photo/5CcgXAFOLbeIkMfEapUXlw==/423619839951594046.jpg]
[/url]
[url=http://img.blog.163.com/photo/aEcfCybTTtEEsprxu0ilEQ==/426997539672116779.jpg]
[/url]
下载地址2：
[url=http://www.91files.com/?NT0UR0UBRIZO3PAIX6R6]http://www.91files.com/?NT0UR0UBRIZO3PAIX6R6
[/url]
[url=http://img.blog.163.com/photo/dwAdRobBFyyuzHTwjyetyQ==/426997539672116781.jpg]
[/url]
[url=http://img.blog.163.com/photo/oM2OA61F3A-zQ--vfvjJhw==/3705618068395947413.jpg]
[/url]
[url=http://img.blog.163.com/photo/8rgsxDAI4oRRRpr03IliiA==/3705618068395947414.jpg]
[/url]
[url=http://img.blog.163.com/photo/RvVGKyJc5gYYStZjUBXG-A==/446700788041853095.jpg]
[/url]
[url=http://img.blog.163.com/photo/pjWJwYZKkZfuavU95Vb4lw==/446700788041853097.jpg]
[/url]
[url=http://img.blog.163.com/photo/hpUsoVxZjWJcF86zPFYyEw==/3705618068395947415.jpg]
[/url]
[url=http://img.blog.163.com/photo/Y8AcEbjIEBJ2Oi6Go7S6bw==/3705618068395947416.jpg]
[/url]
[url=http://img.blog.163.com/photo/-7SLbETRo1htChWf-lZoTw==/3705618068395947417.jpg]
[/url]
[url=http://img.blog.163.com/photo/l_uAqk5zMOxblk0PsTf2sg==/423619839951594049.jpg]



本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u1/52542/showart_490778.html