I will remove the 5 minute limitation and the every 2 hour rules. Ok, my current IP ban list blocked from my network:Īdd action=accept chain=prerouting comment="allow lan" src-address=192.168.0.0/24Īdd action=drop chain=prerouting comment="testers to block" src-address-list=blocklistĪdd action=accept chain=prerouting comment="testers accepted" src-address-list=trackingĪdd action=accept chain=prerouting comment="testers accepted" disabled=yes src-address-list=testerĪdd action=drop chain=prerouting comment="previous testers drop" disabled=yes src-address-list=previousĪdd action=add-src-to-address-list address-list=tester address-list-timeout=5m chain=prerouting comment="add to tester" disabled=yes dst-port=2000-2100 protocol=tcpĪdd action=add-src-to-address-list address-list=tester address-list-timeout=5m chain=prerouting comment="add to tester" disabled=yes dst-port=2000-2100 protocol=udpĪdd action=add-src-to-address-list address-list=previous address-list-timeout=2h chain=prerouting comment="add to previous" disabled=yes dst-port=2000-2100 protocol=tcpĪdd action=add-src-to-address-list address-list=previous address-list-timeout=2h chain=prerouting comment="add to previous" disabled=yes dst-port=2000-2100 protocol=udpĪdd action=add-src-to-address-list address-list=tracking address-list-timeout=1d chain=prerouting comment="add to previous" dst-port=2000-2100 protocol=tcpĪdd action=add-src-to-address-list address-list=tracking address-list-timeout=1d chain=prerouting comment="add to previous" dst-port=2000-2100 protocol=udp
0 kommentar(er)
