禁止QQ登陆脚本
/ip firewall layer7-protocol
add comment="" name=qqfarm regexp="(\\qq.\?\\com.+\\mc.+\\swf.+\\flash|\\happy\
farm.+\\swf.+\\flash|\\parker.+\\qq.\?\\com.+\\swf)"
add comment="" name=webQQ regexp="(web.qq.com|web2.qq.com)"
add comment="" name=QQ2011 regexp="^.\?.\?[\\x02|\\x05]\\x22\\x27.+|^.\?.\?[\\\
x02|\\x05]\\x22\\x27.+[\\x03|\\x09]\$|QQMail20Client|^/xFE/x42../x42/x02/x\
0B/x7D/x98/x38/xE4.+"
add comment="" name=QQ regexp="^.\?.\?\\x02.+\\x03\$"
/ip firewall filter
add action=drop chain=forward comment="\BD\FB\D6\B9QQ" disabled=no dst-port=\
8000 protocol=udp src-address=192.168.0.1-192.168.0.100 src-port=\
4000-4009
add action=drop chain=forward comment="" disabled=no layer7-protocol=QQ \
src-address=192.168.0.1-192.168.0.100
add action=drop chain=forward comment="" disabled=no layer7-protocol=QQ2011 \
src-address=192.168.0.1-192.168.0.100
add action=drop chain=forward comment="" disabled=no layer7-protocol=qqfarm \
src-address=192.168.0.1-192.168.0.100
add action=drop chain=forward comment="" disabled=no layer7-protocol=webQQ \
src-address=192.168.0.1-192.168.0.100 |
|
/1 
湘公网安备 43120202000168号 |
免责声明
本服务器托管于 <阿里云>
做网吧行业最后死去的一个论坛
