ROS软路由禁下载和看网络视频

ROS软路由禁下载和看网络视频

能禁迅雷。 PPS单靠脚本禁不了。
/ ip firewall filter add chain=forward content="octet-stream" action=drop comment="NO Thunder" disabled=no
/ ip firewall filter add chain=forward content="Pragma: no-cache" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="Connection: close" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="Range: bytes=" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="Cookie: __utma=" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="filename=" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="Cookie rtime=" action=drop comment="" disabled=no
/ ip firewall filter add chain=forward content="Content-Disposition: attachment;" action=drop comment="" disabled=no
这是完全禁止迅雷的。有副作用就是普通下载保存也不能下。原因是禁止了octet-stream这个关键字。（实际测试过）
建议用下面的代码：
/ ip firewall filter
add chain=forward content=octet-stream action=drop comment="\D1\B8\C0\D7\B5\A5\CF\DF\B3\CCBegin" disabled=no
add chain=forward dst-address=213.39.61.58 action=drop comment="" disabled=no
add chain=forward dst-address=219.129.83.0/24 action=drop comment="" disabled=no
add chain=forward dst-address=220.172.191.36 action=drop comment="" disabled=no
add chain=forward dst-address=61.183.55.0/24 action=drop comment="" disabled=no
add chain=forward dst-address=58.61.39.0/24 action=drop comment="" disabled=no
add chain=forward dst-address=121.10.120.0/24 protocol=tcp dst-port=!80 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=3076-3079 action=drop comment="" disabled=no
add chain=forward protocol=udp dst-port=3076-3079 action=drop comment="" disabled=no
add chain=forward dst-address=221.238.253.251 action=accept comment="Thunder Login IP" disabled=no
add chain=forward protocol=udp dst-port=1004 action=drop comment="" disabled=no
add chain=forward protocol=udp dst-port=5004 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=5200 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=6200 action=drop comment="" disabled=no
add chain=forward protocol=tcp dst-port=8001 action=drop comment="" disabled=no
add chain=forward protocol=udp dst-port=8001 action=drop comment="" disabled=no
add chain=forward protocol=udp src-port=15000-15001 action=drop comment="" disabled=no
add chain=forward protocol=udp src-port=16818 action=drop comment="\D1\B8\C0\D7\B5\A5\CF\DF\B3\CCOver" disabled=no
迅雷单线程脚本。。能让迅雷单线程下载。。也不影响其他下载。

启用恶意网址关键字过滤吧

用协议限制。不需要脚本。

web-proxy,查阅一下相关文档，很容易的。