Created
July 21, 2021 06:44
-
-
Save zdienos/667d71b789ee391d131f36ab6cec284b to your computer and use it in GitHub Desktop.
conficker bloker with mikrotik
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ***************** | |
| konficker blocker | |
| ***************** | |
| /ip firewall filter add chain=virus protocol= udp dst-port=135 action=drop comment=”Confiker” disabled=no | |
| /ip firewall mangle | |
| add chain=prerouting protocol=udp dst-port=445 action=mark-connection new-connection-mark=conn-conficker comment=”445-UDP” disabled=no passthrough=yes | |
| add chain=prerouting protocol=tcp dst-port=445 action=mark-connection new-connection-mark=conn-conficker comment=”445-TCP” disabled=no passthrough=yes | |
| add chain=prerouting protocol=tcp dst-port= 135,137,138,139 action=mark-connection new-connection-mark=conn-conficker comment=”135,137,138,139-TCP” disabled=no passthrough=yes | |
| add chain=prerouting protocol=udp dst-port=135,137,138,139 action=mark-connection new-connection-mark=conn-conficker comment=”135,137,138,139-UDP” disabled=no passthrough=yes | |
| add chain=prerouting connection-mark=conn-conficker action=mark-packet new-packet-mark=conficker-pkt passthrough=no comment=”conficker-pkt” disabled=no | |
| /ip firewall filter | |
| add chain=forward packet-mark=conficker-pkt action=drop comment=”drop conficker” disabled=no |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment