防DDOS攻击

防DDOS攻击

/ip firewall filter
add chain=forward connection-state=new action=jump jump-target=block-ddos
add chain=forward connection-state=new src-address-list=ddoser dst-address-list=ddosed action=drop
add chain=block-ddos dst-limit=50,50,src-and-dst-addresses/10s action=return
add chain=block-ddos action=add-dst-to-address-list address-list=ddosed address-list-timeout=10m
add chain=block-ddos action=add-src-to-address-list address-list=ddoser address-list-timeout=10m

posted on 2015-04-14 00:02  电子灵魂 阅读( ...) 评论( ...) 编辑 收藏

转载于:https://www.cnblogs.com/wordgao/p/4423711.html