160;안녕Ȣ16;세요,
CCR1009 들여서 천천7176; 공ǥ12;Ȣ16;고 1080;습니다.
1060;1228; 1068;0152;1201;1064; 수1456;1032; 보안1012; 설1221;해 1452;/140;고 여기1200;기 찾다가 아래를 0156;견했lj16;데요.
요,152; Winbox나 스크립트나 사용해서 설1221;1012; 해1452;/140; Ȣ16;lj16;데, 순서가 Ǻ12;떻,172; 0176;열.104;Ǻ12;야 맞1012;1648;요??
1228;가 ]12;~]19; 번호를 매겼lj16;데, 맨위 1ǥ12;터 순서를 1328; 봐 1452;1;시요^^ 160;
1068;단 1217;속1008; 가능Ȣ16;,172; 설1221;해 .160;었1648;만, 0148;른 순서가 Ƽ17;금합니다.
그리고, ]15;룰1032; !either11008;(ዴ1;1008;색표시) 160;1068;0152;1201;1004;/196; wanኖ1;1012; 가리킬까요, lanኖ1;1012; 가리킬까요??
0120;리 감사드립니다.
<라우터 보호>
160;/ip firewall filter
]12; add chain=input connection-state=invalid action=drop \
160; 160; comment="Drop Invalid connections" 160;
]13; add chain=input connection-state=established action=accept \
160; 160; comment="Allow Established connections" 160;
]14; add chain=input protocol=icmp action=accept \
160; 160; comment="Allow ICMP"160;
]15; add chain=input src-address=192.168.1.0/24 action=accept \
160; 160; in-interface=!ether1
]16; add chain=input action=drop comment="Drop everything else" 160;
<클라1060;Ǻ16;트 보호>
160;/ip firewall filter
]17; add chain=forward protocol=tcp connection-state=invalid \
160; 160; 160;action=drop comment="drop invalid connections" 160;
]18; add chain=forward connection-state=established \160;
160; 160; 160;action=accept comment="allow already established connections" 160;
]19; add chain=forward connection-state=related action=accept \
160; 160; 160;comment="allow related connections" 160;
À§ ³»¿ëÀº ¿ÀÈ÷·Á ±âº» ¹æȺ® ·ê¿¡¼ ÀÌ°ÍÀú°Í ºüÁø ³»¿ëÀÔ´Ï´Ù.
4ÀÇ ether1ÀÌ wan, lan ÀÏÁö´Â Àüü ¹®¸ÆÀ» ºÁ¾ß ÇÕ´Ï´Ù.
¹ÌÅ©·Îƽ °í¼öºÐ Áß¿¡¼, Ȥ½Ã ±âº»ÀûÀ¸·Î ¼¼ÆÃÇϸé ÁÁÀ» filter ruleÀÇ ¸µÅ©¶óµµ °¡¸£ÃÄ ÁֽǺРÀÖÀ¸½Ã´Ù¸é ¹Ì¸® °¨»çµå¸®°Ú½À´Ï´Ù ~!^^