h3c f100-s 禁止迅雷下载，大智慧

cifan

h3c f100-s
禁止迅雷下载，大智慧
time-range off-work-time1 00:00 to 07:30 daily
time-range off-work-time2 17:01 to 24:00 daily

acl number 3002
description discarding unnecessary packets
rule 10 permit ip time-range off-work-time1
rule 11 permit ip time-range off-work-time2
rule 12 permit udp destination-port eq dns
rule 13 permit tcp destination-port eq www
rule 14 permit tcp destination-port eq 443
rule 15 permit tcp destination-port eq ftp
rule 16 permit tcp destination-port eq pop3
rule 17 permit tcp destination-port eq smtp
rule 18 permit udp destination-port eq 8000
rule 19 permit tcp destination-port eq 1863
rule 20 permit tcp destination-port eq domain
rule 21 permit tcp destination-port eq 5000
rule 22 deny tcp destination-port eq 5188
rule 23 deny tcp destination-port eq 22223
rule 30 permit icmp
rule 31 permit tcp destination-port eq telnet
rule 50 deny ip

interface ethernet 0/2
firewall packet-filter 3002 outbound

在这里我设了两个时间段，分别是00:00～07:30和17:01～24:00，在这段时间内不限制BT和迅雷。

实际效果非常好，迅雷、BT和eMule基本上连不上任何资源。缺点是如果有特殊软件如股票和网游等

需要使用，需要抓包找出目的端口，再随时向ACL 3002里面添加新规则

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/22117/showart_1821855.html

万里北国

大智慧就几个端口，封了就行。