Routeros ROS 定时分时段封禁网站

风一样的男孩

1. # jun/11/2013 17:27:05 by RouterOS 5.20
   
2. # time kill web
   
3. 
   
4. /ip firewall filter
   
5. add action=drop chain=forward comment="kill web" disabled=no packet-mark=\
   
6.     "Kill Web mark packet"
   
7. 
   
8. /ip firewall mangle
   
9. add action=mark-connection chain=forward comment="web taobao.com" content=\
   
10.     taobao.com disabled=no new-connection-mark="Kill Web Conn" passthrough=\
    
11.     yes
    
12. add action=mark-connection chain=forward comment="web a.tbcdn.cn" content=\
    
13.     tbcdn.cn disabled=no new-connection-mark="Kill Web Conn" passthrough=yes
    
14. add action=mark-connection chain=forward comment="web jd.com" content=jd.com \
    
15.     disabled=no new-connection-mark="Kill Web Conn" passthrough=yes
    
16. add action=mark-packet chain=forward comment="Kill Web mark packet" \
    
17.     connection-mark="Kill Web Conn" disabled=no new-packet-mark=\
    
18.     "Kill Web mark packet" passthrough=no
    
19. 
    
20. /system scheduler
    
21. add disabled=no interval=3m30s name="kill web" on-event=":global nowtime  [:pi\
    
22.     ck [/system clock get time] 0 2]\r\
    
23.     \n:if (\$nowtime >= 08 && \$nowtime <= 12) do={\r\
    
24.     \n:log info [/ip firewall filter enable [/ip firewall filter find comment=\
    
25.     "kill web"]]\r\
    
26.     \n:log info ("\A1\BC\BD\FB\D6\B9\CD\F8\D5\BE\D6\D0 8:00 -- 12:00\A1\BD\A3\
    
27.     \AC\CF\D6\D4\DA\CA\B1\BC\E4\A3\BA".\$nowtime."\B5\E3")}\r\
    
28.     \n:if (\$nowtime >= 12 && \$nowtime < 13) do={\r\
    
29.     \n:log info [/ip firewall filter disable [/ip firewall filter find comment\
    
30.     ="kill web"]]\r\
    
31.     \n:log info ("\A1\BC\CD\F8\D5\BE\B7\C5\D0\D0\D6\D0 12:00 -- 13:00\A1\BD\
    
32.     \A3\AC\CF\D6\D4\DA\CA\B1\BC\E4\A3\BA".\$nowtime."\B5\E3")}\r\
    
33.     \n:if (\$nowtime >= 13 && \$nowtime < 17) do={\r\
    
34.     \n:log info [/ip firewall filter enable [/ip firewall filter find comment=\
    
35.     "kill web"]]\r\
    
36.     \n:log info ("\A1\BC\BD\FB\D6\B9\CD\F8\D5\BE\D6\D0 13:00 -- 17:00\A1\BD\
    
37.     \A3\AC\CF\D6\D4\DA\CA\B1\BC\E4\A3\BA".\$nowtime."\B5\E3")}\r\
    
38.     \n:if (\$nowtime >=17  || \$nowtime < 08) do={\r\
    
39.     \n:log info [/ip firewall filter disable [/ip firewall filter find comment\
    
40.     ="kill web"]]\r\
    
41.     \n:log info ("\A1\BC\CD\F8\D5\BE\B7\C5\D0\D0\D6\D0 17:00 -- 08:00\A1\BD\
    
42.     \A3\AC\CF\D6\D4\DA\CA\B1\BC\E4\A3\BA".\$nowtime."\B5\E3")}\r\
    
43.     \n\r\
    
44.     \n:log info ("\A1\BC\CD\F8\D5\BE\B7\C3\CE\CA\BF\D8\D6\C6\BD\C5\B1\BE\D6\
    
45.     \B4\D0\D0\CD\EA\B1\CF\A1\BD\A3\AC\CF\D6\D4\DA\CA\B1\BC\E4\A3\BA".\$nowtim\
    
46.     e."\B5\E3")\r\
    
47.     \n" policy=\
    
48.     ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \
    
49.     start-date=jun/11/2013 start-time=08:46:55

复制代码