Advertisement
willianmp

Firewall ipv6

Jul 22nd, 2017
419
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. /ip firewall connection tracking
  2. set tcp-established-timeout=10m
  3. ##
  4. #
  5. /ipv6 firewall address-list
  6. add address=fe80::/16 list=allowed
  7. add address=ff02::/16 comment=multicast list=allowed
  8. ##
  9. #
  10. /ipv6 firewall filter
  11. add chain=input comment="allow established and related" connection-state=established,related
  12. add chain=input comment="allow allowed addresses" src-address-list=allowed
  13. add action=drop chain=input
  14. add chain=forward comment=established,related connection-state=established,related
  15. add action=drop chain=forward comment=invalid connection-state=invalid log=yes log-prefix=ipv6,invalid
  16. add action=drop chain=forward log-prefix=IPV6
  17. ##
  18. #
  19. /ipv6 nd
  20. set [ find default=yes ] disabled=yes
  21. ##
  22. #
  23.  
  24. Todo trabalho tem um custo, contribua com qualquer valor em minha carteira de Bitcoins:
  25. 13RbNMKewGwrbnwAKwT5hJA7XpugXFBhXV
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement