Juniper禁止qq和msn的配置脚本（针对不支持DI的老版本设备）

煜轩

支持se club成立 回亏广大老用户\r\n\r\n不支持DI的老设备想要禁用QQ和msn可以使用。 \r\n\r\n禁用思路就是禁止所有的常用端口，然后静止访问目标地址为支持http方式的QQ和msn服务器的ip地址。 \r\n\r\n\r\n上个月翻出来的老脚本，2005年7月有效，估计现在又多了新的服务器，有兴趣的朋友可以完善下重新发上来。完善方式，就是找台PC在加载策略以后，尝试登录到QQ或msn，通过netstat找到那些服务器的IP，然后新建address Untrust，最后加到相应的group address组里。 \r\n\r\n\r\n建议使用方式：\r\n\r\ntelnet 到命令行模式，然后一次性粘贴进去即可。 \r\n\r\n注意最后4句有关策略的，确认序号不重复，冲突了别怪我没有告诉你！\r\n\r\n禁止qq和msn的配置脚本.txt\r\n__________________________________________________________________________________\r\n\r\nset service \"msn\" protocol tcp src-port 0-65535 dst-port 1863-1863 \r\nset service \"msn\" + udp src-port 0-65535 dst-port 1863-1863 \r\nset service \"msn\" + tcp src-port 0-65535 dst-port 7001-7001 \r\nset service \"msn\" + udp src-port 0-65535 dst-port 7001-7001 \r\nset service \"QQ\" protocol tcp src-port 0-65535 dst-port 8000-8000 \r\nset service \"QQ\" + udp src-port 0-65535 dst-port 8000-8000 \r\nset service \"QQ\" + tcp src-port 0-65535 dst-port 8001-8001 \r\nset service \"QQ\" + udp src-port 0-65535 dst-port 8001-8001 \r\nset service \"QQ\" + tcp src-port 0-65535 dst-port 4000-4000 \r\nset service \"QQ\" + udp src-port 0-65535 dst-port 4000-4000 \r\nset service \"qq2\" protocol tcp src-port 0-65535 dst-port 80-80 \r\nset service \"qq2\" + udp src-port 0-65535 dst-port 80-80 \r\nset service \"qq2\" + tcp src-port 0-65535 dst-port 443-443 \r\nset service \"qq2\" + udp src-port 0-65535 dst-port 443-443 \r\nset address \"Untrust\" \"msn-name1\" messenger.hotmail.com\r\nset address \"Untrust\" \"msn-name10\" 64.4.12.200 255.255.255.255\r\nset address \"Untrust\" \"msn-name11\" 64.4.12.201 255.255.255.255\r\nset address \"Untrust\" \"msn-name12\" 65.54.194.117 255.255.255.255\r\nset address \"Untrust\" \"msn-name13\" 207.46.68.23 255.255.255.255\r\nset address \"Untrust\" \"msn-name14\" 207.46.104.20 255.255.255.255\r\nset address \"Untrust\" \"msn-name15\" 207.46.107.14 255.255.255.255\r\nset address \"Untrust\" \"msn-name16\" 207.46.107.125 255.255.255.255\r\nset address \"Untrust\" \"msn-name17\" 207.46.110.27 255.255.255.255\r\nset address \"Untrust\" \"msn-name18\" 207.46.110.28 255.255.255.255\r\nset address \"Untrust\" \"msn-name19\" 207.46.110.254 255.255.255.255\r\nset address \"Untrust\" \"msn-name2\" webmessenger.msn.com\r\nset address \"Untrust\" \"msn-name20\" 207.46.110.6 255.255.255.255\r\nset address \"Untrust\" \"msn-name21\" 65.54.157.112 255.255.255.255\r\nset address \"Untrust\" \"msn-name22\" 207.68.178.16 255.255.255.255\r\nset address \"Untrust\" \"msn-name23\" 207.46.110.30 255.255.255.255\r\nset address \"Untrust\" \"msn-name24\" 207.68.178.61 255.255.255.255\r\nset address \"Untrust\" \"msn-name25\" 207.46.110.21 255.255.255.255\r\nset address \"Untrust\" \"msn-name26\" 65.54.142.189 255.255.255.255\r\nset address \"Untrust\" \"msn-name27\" 65.54.194.118 255.255.255.255\r\nset address \"Untrust\" \"msn-name28\" 218.91.255.10 255.255.255.255\r\nset address \"Untrust\" \"msn-name29\" 65.54.179.192 255.255.255.255\r\nset address \"Untrust\" \"msn-name3\" 207.46.104.20 255.255.255.255\r\nset address \"Untrust\" \"msn-name4\" 207.46.110.254 255.255.255.0\r\nset address \"Untrust\" \"msn-name5\" 65.54.194.117 255.255.255.255\r\nset address \"Untrust\" \"msn-name6\" 203.89.193.30 255.255.255.255\r\nset address \"Untrust\" \"msn-name7\" 207.46.110.26 255.255.255.255\r\nset address \"Untrust\" \"msn-name8\" 207.46.110.24 255.255.255.255\r\nset address \"Untrust\" \"msn-name9\" 207.46.110.18 255.255.255.255\r\nset address \"Untrust\" \"qq-server\" 218.5.72.126 255.255.255.255\r\nset address \"Untrust\" \"qq-server1\" 61.141.194.203 255.255.255.255\r\nset address \"Untrust\" \"qq-server10\" 202.104.129.251 255.255.255.255\r\nset address \"Untrust\" \"qq-server11\" 202.104.129.252 255.255.255.255\r\nset address \"Untrust\" \"qq-server12\" 202.104.129.253 255.255.255.255\r\nset address \"Untrust\" \"qq-server13\" 202.104.129.254 255.255.255.255\r\nset address \"Untrust\" \"qq-server14\" 211.157.38.38 255.255.255.255\r\nset address \"Untrust\" \"qq-server15\" 218.17.209.23 255.255.255.255\r\nset address \"Untrust\" \"qq-server16\" 218.17.209.42 255.255.255.255\r\nset address \"Untrust\" \"qq-server17\" 218.17.217.106 255.255.255.255\r\nset address \"Untrust\" \"qq-server18\" 218.18.95.153 255.255.255.255\r\nset address \"Untrust\" \"qq-server19\" 218.18.95.165 255.255.255.255\r\nset address \"Untrust\" \"qq-server2\" 61.144.238.145 255.255.255.255\r\nset address \"Untrust\" \"qq-server20\" 219.133.40.21 255.255.255.0\r\nset address \"Untrust\" \"qq-server21\" 219.133.40.73 255.255.255.255\r\nset address \"Untrust\" \"qq-server22\" 219.133.40.89 255.255.255.255\r\nset address \"Untrust\" \"qq-server23\" 219.133.40.90 255.255.255.255\r\nset address \"Untrust\" \"qq-server24\" 219.133.40.92 255.255.255.255\r\nset address \"Untrust\" \"qq-server25\" 219.133.40.95 255.255.255.255\r\nset address \"Untrust\" \"qq-server26\" 219.133.40.97 255.255.255.255\r\nset address \"Untrust\" \"qq-server27\" 219.133.40.157 255.255.255.255\r\nset address \"Untrust\" \"qq-server28\" 219.133.40.177 255.255.255.255\r\nset address \"Untrust\" \"qq-server29\" 219.133.40.189 255.255.255.255\r\nset address \"Untrust\" \"qq-server3\" 61.144.238.146 255.255.255.255\r\nset address \"Untrust\" \"qq-server30\" 219.134.128.16 255.255.255.255\r\nset address \"Untrust\" \"qq-server31\" 219.133.49.5 255.255.255.255\r\nset address \"Untrust\" \"qq-server4\" 61.144.238.149 255.255.255.255\r\nset address \"Untrust\" \"qq-server5\" 61.144.238.155 255.255.255.255\r\nset address \"Untrust\" \"qq-server6\" 61.172.249.135 255.255.255.255\r\nset address \"Untrust\" \"qq-server7\" 65.54.229.253 255.255.255.255\r\nset address \"Untrust\" \"qq-server8\" 202.96.170.164 255.255.255.255\r\nset address \"Untrust\" \"qq-server9\" 202.104.129.151 255.255.255.255\r\nset group address \"Untrust\" \"msn-name-group\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name1\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name10\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name11\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name12\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name13\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name14\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name15\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name16\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name17\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name18\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name19\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name2\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name20\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name21\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name22\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name23\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name24\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name25\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name26\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name27\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name28\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name29\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name3\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name4\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name5\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name6\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name7\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name8\"\r\nset group address \"Untrust\" \"msn-name-group\" add \"msn-name9\"\r\nset group address \"Untrust\" \"QQ-server-name\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server1\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server10\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server11\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server12\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server13\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server14\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server15\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server16\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server17\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server18\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server19\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server2\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server20\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server21\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server22\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server23\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server24\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server25\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server26\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server27\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server28\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server29\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server3\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server30\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server31\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server4\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server5\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server6\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server7\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server8\"\r\nset group address \"Untrust\" \"QQ-server-name\" add \"qq-server9\"\r\nset policy id 32 name \"msn\" from \"Trust\" to \"Untrust\" \"Any\" \"Any\" \"msn\" deny \r\nset policy id 12 name \"msn\" from \"Trust\" to \"Untrust\" \"Any\" \"msn-name-group\" \"ANY\" deny \r\nset policy id 19 name \"QQ\" from \"Trust\" to \"Untrust\" \"Any\" \"Any\" \"QQ\" deny \r\nset policy id 33 name \"QQ-server\" from \"Trust\" to \"Untrust\" \"Any\" \"QQ-server-name\" \"ANY\" deny