gfx wrote:
其它VPN over PPPoE最佳MTU各為:
PPTP=1400 ／ L2TP=1452 ／ SSTP=1400 ／ OVPN=1500
lenbo wrote:pptp|l2tp|ike2用戶端地址腳本，需整點開始，每分鐘run一次：
因為腳本是排程一小時(恕刪)
| :local date [/system clock get date] :local tt [/system clock get time] :local month [:toarray "0,jan,feb,mar,apr,may,jun,jul,aug,sep,oct,nov,dec"] :local mm [:find $month [:pick $date 0 3]] :local cli :foreach i in=[/log find topics~"(pptp|l2tp|ipsec)"] do={ :local content [/log get $i message] :local conform no :local dd [:pick $date 4 6] :local t [/log get $i time] :set conform ([:pick $t 0]~"[012]" && $t>=$tt-0:1:0) :if ([:pick $tt 0 5]="00:00" && [:pick $t 7 12]="23:59") do={ :local m [:find $month [:pick $t 0 3]] :local d [:pick $t 4 6] :set conform ($mm=$m && ($dd-$d)=1) :if ($dd="01" && (($mm-$m)=-1 || ($mm-$m)=-11)) do={ :set conform ($conform || ($d=30 && [:find 4,6,9,11 $m]>=0)) :set conform ($conform || ($d=31 && [:find 1,3,5,7,8,10,12 $m]>=0)) :set conform ($conform || ($m=2 && [:find 28,29 $d]>=0)) } } :if ($conform) do={ :if ($content~"from") do={ :set cli [:pick $content ([:find $content "from"]+5) [:len $content]] } :if ($content~"ike2") do={ :local ed 0 ; :local count 0 :do { :if ([:pick $content $ed]="[") do={:set count ($count+1)} :set ed ($ed+1) } while=($count<2) :set cli [:pick $content ([:find $content "-"]+1) ($ed-1)] } :set cli [:toarray "$t,$cli"] } :if ($content~"( connected|acquired)" && [:pick $cli 0]=$t) do={ :do {/ip firewall address-list add list=VpnClient address=[:pick $cli 1] timeout=1d} on-error={} } } |
gpman2020 wrote:FTP由於發展的比較早，
請問一下FTP的設定(恕刪)
/ipv6 dhcp-server
add address-pool=Hinet_IPv6 dhcp-option="" disabled=no interface=bridge-local \
lease-time=3d name=DHCPv6_Server preference=255 rapid-commit=yes \
route-distance=1 use-radius=no
/ipv6 address
# address pool error: pool not found: Hinet_IPv6 (4)
add address=::1/64 advertise=yes disabled=no eui-64=no from-pool=Hinet_IPv6 \
interface=bridge-local no-dad=no
/ipv6 dhcp-client
add add-default-route=yes default-route-distance=1 dhcp-options="" disabled=\
no interface=HinetPPPoE pool-name=Hinet_IPv6 pool-prefix-length=64 \
prefix-hint=::/0 rapid-commit=no request=prefix use-peer-dns=no
/ipv6 firewall address-list
add address=fe80::/16 disabled=no dynamic=no list=allowed
add address=ff02::/16 comment=multicast disabled=no dynamic=no list=allowed
/ipv6 firewall mangle
add action=change-mss chain=forward comment=ChangeMSS !connection-by
!connection-limit !connection-mark !connection-rate !connection-
!connection-type !content disabled=no !dscp !dst-address \
!dst-address-list !dst-limit !dst-port !headers !hop-limit !icmp
!in-bridge-port !in-bridge-port-list !in-interface !in-interface
!ingress-priority !ipsec-policy !limit log-prefix="" new-mss=\
clamp-to-pmtu !nth !out-bridge-port !out-bridge-port-list !out-i
!out-interface-list !packet-mark !packet-size passthrough=yes \
!per-connection-classifier !port !priority protocol=tcp !random
!src-address !src-address-list !src-mac-address !src-port tcp-fl
!tcp-mss !time !tls-host
/ipv6 nd
set [ find default=yes ] advertise-dns=no advertise-mac-address=yes
no hop-limit=64 interface=bridge-local managed-address-configura
mtu=unspecified other-configuration=yes ra-delay=3s ra-interval=
ra-lifetime=30m reachable-time=unspecified retransmit-interval=\
unspecified
/ipv6 nd prefix default
set autonomous=no preferred-lifetime=1w valid-lifetime=4w2d
/ipv6 settings
set accept-redirects=yes-if-forwarding-disabled accept-router-advert
yes-if-forwarding-disabled forward=yes max-neighbor-entries=1024
