951G_export

Filter Szabályok:

add action=accept chain=input dst-port=2200 protocol=tcp
add action=accept chain=input dst-port=8291 protocol=tcp
add action=accept chain=input dst-port=500,1701,4500 protocol=udp
add action=accept chain=input protocol=ipsec-esp
add action=accept chain=input icmp-options=8:0-255 protocol=icmp
add action=accept chain=input in-interface=ether4 protocol=ospf
add action=accept chain=input connection-state=established,related
add action=drop chain=input connection-state=invalid
add action=drop chain=input
add action=drop chain=forward comment=Tiltas protocol=tcp src-address-list=Block
add action=drop chain=forward protocol=tcp src-address=89.216.X.X
add action=drop chain=forward protocol=tcp src-address=109.100.X.X
add action=drop chain=forward protocol=tcp src-address=80.211.X.X
add action=fasttrack-connection chain=forward
add action=accept chain=forward connection-state=established,related,new
add action=drop chain=forward connection-state=invalid

Mangle szabály:

add action=fasttrack-connection chain=prerouting