查覺到風氣的改變是０１暗流團體已漸漸不能接受而假鬼假怪．因我的疏失而導致這項缺失一直沒被發現．現在及時糾正了．我對跟著我用ＲＯＳ的用戶說聲抱歉．
--
Katy Perry - Never Really Over (Official)
個人積分：49473分
文章編號：73386945
個人積分：49473分
文章編號：73387076
個人積分：49473分
文章編號：73387698
這樣做是遵循原廠定義．避免如同ｉｃｍｐ狀況讓暗流劫持裝置擅自透過Ｆｏｒｗａｒｄ連到主機．
| /ip firewall address-list add address=192.168.88.2-192.168.88.254 list=LAN /ip firewall nat add action=masquerade chain=srcnat comment="IP Masquerading" \ out-interface=pppoe-out1 /ip firewall filter add action=accept chain=input comment=\ "Accept established(Input) packets" connection-state=\ established add chain=input comment=\ "Accept all connections from local network" \ in-interface=bridge src-address-list=LAN add action=jump chain=input comment="Jump for icmp input flow" \ jump-target=icmp protocol=icmp add action=drop chain=input comment=\ "Drop invalid packets" \ connection-state=invalid add action=drop chain=input comment="Drop Rule - Input Chain" \ log-prefix="Drop All" add chain=forward comment=\ "Accept established and related packets" \ connection-state=established,related |
Maluma - 11 PM (Official Video)人品是做人最好的底牌．
個人積分：49473分
文章編號：73387928
這樣就沒問題．因為過去沒有考量到出去的順序．所以出去時ＤＤｏＳ就被利用．黃框紅字要放對．
很簡單．之前還未修正時．內部裝置只要出去時．沒有紅字的抵擋．透過ＤＤｏＳ規則而連出主機．
這時候就是利用的開始．所以．我說了．因為我的疏失導致這部分通通破功．定義一定要遵循原廠．
這部分之前未改時．放進來用導致內部只要有裝置連到網路的釣魚發動連出而導致內部ＡＰ被穿透．
穿透達成通路時就能被鄰近劫持的ＡＰ徹底監控．黃框紅字一定要放正確．我總算明白原廠的定義．
藉這次修正就能避免過去這種失誤被利用情況發生．防火牆順序要放正確．進來與出去都要考量到．
| /ip firewall filter add action=drop chain=input comment="Drop Rule - Input Chain" \ log-prefix="Drop All" add action=jump chain=forward comment="DDoS Detection and Blocking" \ connection-state=new jump-target=detect-ddos add action=return chain=detect-ddos dst-limit=\ 32,32,src-and-dst-addresses/10s add action=add-dst-to-address-list address-list=ddosed \ address-list-timeout=10m chain=detect-ddos add action=add-src-to-address-list address-list=ddoser \ address-list-timeout=10m chain=detect-ddos add chain=forward comment=\ "Accept established and related packets" \ connection-state=established,related /ip route add distance=1 routing-mark=ddoser-route-mark type=blackhole /ip firewall mangle add action=mark-routing chain=prerouting dst-address-list=ddosed \ new-routing-mark=ddoser-route-mark passthrough=no src-address-list=ddoser |
Carly Rae Jepsen - Too Much [Official Music Video]人品是做人最好的底牌．
個人積分：49473分
文章編號：73388517
個人積分：49473分
文章編號：73388959
--
Billie Eilish Scares Her Fan Melissa McCarthy – EXTENDED人品是做人最好的底牌．
個人積分：49473分
文章編號：73389570
--
寶貝：）晚安囉．五版確定解決後．我可以先暫時離開了．繼續過著忙碌日．
--
Meduza - Piece Of Your Heart (Official Video) ft. Goodboys人品是做人最好的底牌．
個人積分：49473分
文章編號：73394601
個人積分：330375分
文章編號：73395592
個人積分：16055分
文章編號：73398095
