Scribd Logo
Upload

Welcome to Scribd!

  • Configuracion Firewall

    Uploaded by

    telecomunicacionesos
    17 views1 page
    The document contains firewall configuration rules that block or drop traffic including: YouTube QUIC traffic on ports 80 and 443 using UDP; external web proxies on port 8080 for multiple WAN interfaces; external DNS caching on port 53 UDP for multiple WAN interfaces; ping attacks for multiple WAN and LAN interfaces using ICMP; all P2P traffic; limiting new UDP connections per client to a range of ports; and blocking TCP and UDP ports in ranges 10000-65355 for a Local/Clientes interface. The rules have comment descriptions and many are disabled.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document contains firewall configuration rules that block or drop traffic including: YouTube QUIC traffic on ports 80 and 443 using UDP; external web proxies on port 8080 for multiple WAN interfaces; external DNS caching on port 53 UDP for multiple WAN interfaces; ping attacks for multiple WAN and LAN interfaces using ICMP; all P2P traffic; limiting new UDP connections per client to a range of ports; and blocking TCP and UDP ports in ranges 10000-65355 for a Local/Clientes interface. The rules have comment descriptions and many are disabled.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    17 views1 page

    Configuracion Firewall

    Uploaded by

    telecomunicacionesos
    The document contains firewall configuration rules that block or drop traffic including: YouTube QUIC traffic on ports 80 and 443 using UDP; external web proxies on port 8080 for multiple WAN interfaces; external DNS caching on port 53 UDP for multiple WAN interfaces; ping attacks for multiple WAN and LAN interfaces using ICMP; all P2P traffic; limiting new UDP connections per client to a range of ports; and blocking TCP and UDP ports in ranges 10000-65355 for a Local/Clientes interface. The rules have comment descriptions and many are disabled.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    /ip firewall layer7-protocol

    add name=YouTube regexp="^.*(\\.youtube\\.com|\\.googlevideo\\.com).*\$"


    /ip firewall filter
    add action=drop chain=forward comment="Bloqueo QUIC" dst-port=80,443 \
    layer7-protocol=YouTube protocol=udp
    add action=drop chain=input comment="Bloqueo webproxy externo WAN1" disabled=yes \
    dst-port=8080 in-interface=WAN1 protocol=tcp
    add action=drop chain=input comment="Bloqueo webproxy externo WAN2" disabled=yes \
    dst-port=8080 in-interface=WAN2 protocol=tcp
    add action=drop chain=input comment="Bloqueo webproxy externo WAN3" disabled=yes \
    dst-port=8080 in-interface=WAN3 protocol=tcp
    add action=drop chain=input comment="Bloqueo DNS cache externoWAN1" disabled=yes \
    dst-port=53 in-interface=WAN1 protocol=udp
    add action=drop chain=input comment="Bloqueo DNS cache externoWAN2" disabled=yes \
    dst-port=53 in-interface=WAN2 protocol=udp
    add action=drop chain=input comment="Bloqueo DNS cache externoWAN3" disabled=yes \
    dst-port=53 in-interface=WAN3 protocol=udp
    add action=drop chain=input comment="Evitar Ataque Ping WAN1" disabled=yes \
    in-interface=WAN1 protocol=icmp
    add action=drop chain=input comment="Evitar Ataque Ping WAN2" disabled=yes \
    in-interface=WAN2 protocol=icmp
    add action=drop chain=input comment="Evitar Ataque Ping WAN3" disabled=yes \
    in-interface=WAN3 protocol=icmp
    add action=drop chain=input comment="Evitar Ataque Ping LAN" disabled=yes \
    in-interface=LAN protocol=icmp
    add action=drop chain=forward comment="Todo P2P" disabled=yes p2p=all-p2p
    add action=drop chain=forward comment=\
    "Limitar Numero de conexiones UDP por cliente" connection-state=new \
    disabled=yes dst-port=!53,67 limit=30,40 protocol=udp
    add action=drop chain=forward comment="Bloqueo TCP Rango 10000-65355" \
    disabled=yes dst-port=10000-65355 in-interface=Local/Clientes protocol=\
    tcp
    add action=drop chain=forward comment="Bloqueo UDP Rango 10000-65355" \
    disabled=yes dst-port=10000-65355 in-interface=Local/Clientes protocol=\
    udp

    You might also like