RB2011 默认防火墙配置

1. /ip firewall filter
   
2. add action=fasttrack-connection chain=forward connection-state=\
   
3.     established,related
   
4. add action=accept chain=input protocol=icmp
   
5. add action=accept chain=input connection-state=established
   
6. add action=accept chain=input connection-state=related
   
7. add action=accept chain=forward connection-state=established,related
   
8. add action=drop chain=input in-interface-list=!LAN
   

复制代码