--
台積電5奈米獨領業界！EUV跑第一、吞iPhone12晶片訂單 iPhone最強隱藏科技曝光？點「耳朵」秒變竊聽器-【這！不是新聞 精華篇】20191202-5
個人積分：44917分
文章編號：75656184
個人積分：44917分
文章編號：75656274
個人積分：44917分
文章編號：75656368
個人積分：44917分
文章編號：75656452
個人積分：44917分
文章編號：75656454
個人積分：44917分
文章編號：75656455
個人積分：44917分
文章編號：75656486
個人積分：44917分
文章編號：75656587
個人積分：44917分
文章編號：75656687
個人積分：44917分
文章編號：75657655
猴仔是來提醒修正一下ｉｃｍｐ．３：３也要隱蔽．其餘部分沒變．
這是睡覺睡到一半想到與Ｃｏｍｏｄｏ防火牆ｉｃｍｐ規則吻合．ＡＢＣＤＥＦ六版沒變．
--
若你沒再用啥功能．就隱蔽Ｔｙｐｅ８及Ｔｙｐｅ３：１－３來避開網軍試探．規則如下．
/ip firewall filter
add action=jump chain=input jump-target=icmp protocol=icmp \
comment="Jump for icmp input flow"
add action=jump chain=forward jump-target=icmp protocol=icmp \
comment="Jump for icmp forward flow"
add action=accept chain=icmp icmp-options=0:0 protocol=icmp \
comment="Echo Reply"
add action=accept chain=icmp icmp-options=3:0 protocol=icmp \
comment="Net Unreachable"
add action=accept chain=icmp icmp-options=3:4 protocol=icmp \
comment="Host Unreachable Fragmentation Required"
add action=accept chain=icmp icmp-options=4:0 protocol=icmp \
comment="Source Quench"
add action=accept chain=icmp icmp-options=11:0 protocol=icmp \
comment="Time Exceeded"
add action=accept chain=icmp icmp-options=12:0 protocol=icmp \
comment="Parameter Bad"
add action=accept chain=icmp icmp-options=14:0 protocol=icmp \
comment="Timestamp Reply"
add action=accept chain=icmp icmp-options=16:0 protocol=icmp \
comment="Information Reply"
add action=accept chain=icmp icmp-options=18:0 protocol=icmp \
comment="Address Mask Reply"
add action=drop chain=icmp comment="Deny Other Types"
add action=jump chain=output jump-target=icmp protocol=icmp \
comment="Jump for icmp output flow"
--
同樣的．若你有需要用到部分功能就可以把下面ｉｎｐｕｔ部分列入上面規則來防堵網軍．
/ip firewall filter
add action=jump chain=input jump-target=icmp-in protocol=icmp \
comment="Jump for icmp input flow"
add action=accept chain=icmp-in icmp-options=0:0 protocol=icmp \
comment="Echo Reply"
add action=accept chain=icmp-in icmp-options=3:0 protocol=icmp \
comment="Net Unreachable"
add action=accept chain=icmp-in icmp-options=3:4 protocol=icmp \
comment="Host Unreachable Fragmentation Required"
add action=accept chain=icmp-in icmp-options=4:0 protocol=icmp \
comment="Source Quench"
add action=accept chain=icmp-in icmp-options=11:0 protocol=icmp \
comment="Time Exceeded"
add action=accept chain=icmp-in icmp-options=12:0 protocol=icmp \
comment="Parameter Bad"
add action=accept chain=icmp-in icmp-options=14:0 protocol=icmp \
comment="Timestamp Reply"
add action=accept chain=icmp-in icmp-options=16:0 protocol=icmp \
comment="Information Reply"
add action=accept chain=icmp-in icmp-options=18:0 protocol=icmp \
comment="Address Mask Reply"
add action=drop chain=icmp-in comment="Deny Other Types"
add action=jump chain=forward jump-target=icmp protocol=icmp \
comment="Jump for icmp forward flow"
add action=accept chain=icmp icmp-options=0:0 limit=5,5 protocol=icmp \
comment="Limited Echo Reply"
add action=accept chain=icmp icmp-options=3:3 limit=5,5 protocol=icmp \
comment="Limited Port Unreachable"
add action=accept chain=icmp icmp-options=3:4 limit=5,5 protocol=icmp \
comment="Limited Host Unreachable Fragmentation Required"
add action=accept chain=icmp icmp-options=8:0 limit=5,5 protocol=icmp \
comment="Limited Echo Request"
add action=accept chain=icmp icmp-options=11:0 limit=5,5 protocol=icmp \
comment="Limited Time Exceed"
add action=drop chain=icmp comment="Deny Other Types"
add action=jump chain=output jump-target=icmp protocol=icmp \
comment="Jump for icmp output flow"
--
若你需要用到大部分功能．那就繼用目前六版再用的版本．它可以幫助你降低網軍的試探．
/ip firewall filter
add action=jump chain=input jump-target=icmp protocol=icmp \
comment="Jump for icmp input flow"
add action=jump chain=forward jump-target=icmp protocol=icmp \
comment="Jump for icmp forward flow"
add action=accept chain=icmp icmp-options=0:0 limit=5,5 protocol=icmp \
comment="Limited Echo Reply"
add action=accept chain=icmp icmp-options=3:3 limit=5,5 protocol=icmp \
comment="Limited Port Unreachable"
add action=accept chain=icmp icmp-options=3:4 limit=5,5 protocol=icmp \
comment="Limited Host Unreachable Fragmentation Required"
add action=accept chain=icmp icmp-options=8:0 limit=5,5 protocol=icmp \
comment="Limited Echo Request"
add action=accept chain=icmp icmp-options=11:0 limit=5,5 protocol=icmp \
comment="Limited Time Exceed"
add action=drop chain=icmp comment="Deny Other Types"
add action=jump chain=output jump-target=icmp protocol=icmp \
comment="Jump for icmp output flow"
--
BLACK WIDOW Trailer (2020)人品是做人最好的底牌．
