Security Firewall

 

ip firewall filter

add action=accept chain=forward comment="Block Port 25" disabled=yes dst-port=25 protocol=tcp src-address-list=verified-smtp-user

add action=add-src-to-address-list address-list=smtp-spammers address-list-timeout=none-dynamic chain=forward disabled=yes dst-port=25 protocol=tcp \

    src-address-list=pub-pool

add action=drop chain=forward disabled=yes dst-port=25 protocol=tcp src-address-list=smtp-spammers

add action=drop chain=virus comment="Blaster Worm" disabled=yes dst-port=135-139 protocol=tcp

add action=drop chain=virus comment="Messenger Worm" disabled=yes dst-port=135-139 protocol=udp

add action=drop chain=virus comment="Blaster Worm" disabled=yes dst-port=445 protocol=tcp

add action=drop chain=virus comment="Blaster Worm" disabled=yes dst-port=445 protocol=udp

add action=drop chain=virus comment=________ disabled=yes dst-port=593 protocol=tcp

add action=drop chain=virus comment=________ disabled=yes dst-port=1024-1030 protocol=tcp

add action=drop chain=virus comment="Drop MyDoom" disabled=yes dst-port=1080 protocol=tcp

add action=drop chain=virus comment=________ disabled=yes dst-port=1214 protocol=tcp

add action=drop chain=virus comment="ndm requester" disabled=yes dst-port=1363 protocol=tcp

add action=drop chain=virus comment="ndm server" disabled=yes dst-port=1364 protocol=tcp

add action=drop chain=virus comment="screen cast" disabled=yes dst-port=1368 protocol=tcp

add action=drop chain=virus comment=hromgrafx disabled=yes dst-port=1373 protocol=tcp

add action=drop chain=virus comment=cichlid disabled=yes dst-port=1377 protocol=tcp

add action=drop chain=virus comment="Bagle Virus" disabled=yes dst-port=2745 protocol=tcp

add action=drop chain=virus comment=Dumaru.Y disabled=yes dst-port=2283 protocol=tcp

add action=drop chain=virus comment=Beagle disabled=yes dst-port=2535 protocol=tcp

add action=drop chain=virus comment=Beagle.C-K disabled=yes dst-port=2745 protocol=tcp

add action=drop chain=virus comment=MyDoom disabled=yes dst-port=3127-3128 protocol=tcp

add action=drop chain=virus comment="Backdoor OptixPro" disabled=yes dst-port=3410 protocol=tcp

add action=drop chain=virus comment=Worm disabled=yes dst-port=4444 protocol=tcp

add action=drop chain=virus comment=Worm disabled=yes dst-port=4444 protocol=udp

add action=drop chain=virus comment="Drop Sasser" disabled=yes dst-port=5554 protocol=tcp

add action=drop chain=virus comment="Drop Beagle.B" disabled=yes dst-port=8866 protocol=tcp

add action=drop chain=virus comment="Drop Dabber.A-B" disabled=yes dst-port=9898 protocol=tcp

add action=drop chain=virus comment="Drop Dumaru.Y" disabled=yes dst-port=10000 protocol=tcp

add action=drop chain=virus comment="Drop MyDoom.B" disabled=yes dst-port=10080 protocol=tcp

add action=drop chain=virus comment="Drop NetBus" disabled=yes dst-port=12345 protocol=tcp

add action=drop chain=virus comment="Drop Kuang2" disabled=yes dst-port=17300 protocol=tcp

add action=drop chain=virus comment="Drop SubSeven" disabled=yes dst-port=27374 protocol=tcp

add action=drop chain=virus comment="Drop PhatBot,Agobot, Gaobot" disabled=yes dst-port=65506 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=12667 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=27665 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=31335 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=27444 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=34555 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=35555 protocol=udp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=27444 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=27665 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=31335 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=31846 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=34555 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=35555 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=31335 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=31846 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=34555 protocol=tcp

add action=drop chain=virus comment=Trinoo disabled=yes dst-port=35555 protocol=tcp

Share this post