tak máme další.
originální ip adresy
/ip address
add address=192.168.15.29/24 interface=wlan1 network=192.168.15.0
add address=192.168.2.30/24 interface=ether1 network=192.168.2.0
vytvořilo si to address list
/ip firewall address-list
add address=192.168.2.0/24 list=allow-ip
add address=192.168.15.0/24 list=allow-ip
a pak tohle dropnutí mimo lokálních subnetů
/ip firewall filter
add action=tarpit chain=input comment="Add you ip addess to allow-ip in Address Lists." dst-port=30553 protocol=tcp
add action=add-src-to-address-list address-list=allow-ip address-list-timeout=1h chain=input comment="The security flaw for Hajime is closed by the firewall." packet-size=1083 protocol=icmp
add chain=input comment="Please update RotherOS and change password." src-address-list=allow-ip
add action=drop chain=input comment=" Thanks are accepted on WebMoney Z399578297824" dst-port=53 protocol=udp
add action=drop chain=input comment="or BTC 14qiYkk3nUgsdqQawiMLC1bUGDZWHowix1" dst-port=53,8728,8729,21,22,23,80,443,8291 protocol=tcp
add action=passthrough chain=input
plus note
/system note set note="The security flaw for Hajime is closed by the firewall. Please update RotherOS. Gratitude is accepted on WebMoney Z399578297824 or BTC 14qiYkk3nUgsdqQawiMLC1bUGDZWHowix1"
