Bergelut dalam dunia jaringan komputer terutama OS Mikrotik, kita sering kali direpotkan oleh Virus, SPAM atau Trojan yang mengakibatkan komputer client yang terhubung ke dalam jaringan tersebut akan ikut terinfeksi bahkan merusak server sendiri. Untuk itu berikut penulis berikan beberapa script yang bisa pembaca copy paste di New Terminal Mikrotiknya. Scrip di bawah ini bisa dimodifikasi atau ditambah sendiri sesuai dengan kemampuan teman-teman sendiri.
/ ip firewall filter
add chain=forward connection-state=established action=accept comment=”allow
established connections” disabled=no
add chain=forward connection-state=related action=accept comment=”allow related
connections” disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop
Messenger Worm” disabled=no
add chain=forward connection-state=invalid action=drop comment=”drop invalid
connections” disabled=no
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=”Drop Blaster
Worm” disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment=”Worm”
disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment=”Drop Blaster Worm” disabled=no
add chain=virus protocol=udp dst-port=445 action=drop comment=”Drop Blaster Worm” disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment=”________” disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment=”________” disabled=no
add chain=virus protocol=tcp dst-port=1080 action=drop comment=”Drop MyDoom” disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment=”Drop Kazaa” disabled=no
add chain=virus protocol=tcp dst-port=1363 action=drop comment=”ndm requester” disabled=no
add chain=virus protocol=tcp dst-port=1364 action=drop comment=”ndm server” disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment=”screen cast” disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment=”hromgrafx” disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment=”cichlid” disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Beagle Virus” disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop comment=”Drop Dumaru.Y” disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment=”Drop Beagle” disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Drop Beagle.C-K” disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop comment=”Drop MyDoom” disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop comment=”Drop Backdoor OptixPro” disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop comment=”Worm” disabled=no
add chain=virus protocol=udp dst-port=4444 action=drop comment=”Worm” disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop comment=”Drop Sasser” disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop comment=”Drop Beagle.B” disabled=no
add chain=virus protocol=tcp dst-port=9898 action=drop comment=”Drop Dabber.A-B” disabled=no
add chain=virus protocol=tcp dst-port=10080 action=drop comment=”Drop MyDoom.B” disabled=no
add chain=virus protocol=tcp dst-port=12345 action=drop comment=”Drop NetBus” disabled=no
add chain=virus protocol=tcp dst-port=17300 action=drop comment=”Drop Kuang2″ disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment=”Drop SubSeven” disabled=no
add chain=virus protocol=tcp dst-port=65506 action=drop comment=”Drop PhatBot,Agobot, Gaobot” disabled=no
add chain=forward action=jump jump-target=virus comment=”jump to the virus chain” disabled=no
add chain=virus protocol=tcp dst-port=6881-6889 action=drop comment=”Drop BitTorrent” disabled=no
add chain=virus protocol=tcp dst-port=6345-6349 action=drop comment=”Drop Gnutella” disabled=no
add chain=virus protocol=tcp dst-port=31337 action=drop comment=”Drop Streaming Virus” disabled=no
add chain=virus protocol=tcp dst-port=6257 action=drop comment=”winmx napster” disabled=no
add chain=virus protocol=tcp dst-port=6699 action=drop comment=”winmx napster” disabled=no
add chain=virus protocol=tcp dst-port=2754 action=drop comment=”winmx napster” disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment=”winmx napster” disabled=no
add chain=virus protocol=tcp dst-port=4661-4672 action=drop comment=”Edonkey Clones” disabled=no
add chain=virus protocol=tcp dst-port=5556-5557 action=drop comment=”Edonkey Clones” disabled=no
add chain=virus protocol=tcp dst-port=10000 action=drop comment=”Drop Dumaru.Y, webmin” disabled=no
add chain=input protocol=tcp src-port=5500-7000 dst-port=5500-7000 action=drop comment=”" disabled=no
add chain=input protocol=udp src-port=5500-7000 dst-port=5500-7000 action=drop comment=”" disabled=no
add chain=input protocol=udp src-port=7000-10000 dst-port=7000-10000 action=drop comment=”" disabled=no
add chain=input protocol=tcp src-port=7000-10000 dst-port=7000-10000 action=drop comment=”" disabled=no
add chain=forward protocol=tcp src-port=4000-8000 dst-port=4000-8000
action=reject reject-with=icmp-protocol-unreachable comment=”" disabled=no
add chain=forward protocol=udp src-port=4000-8000 dst-port=4000-8000
action=reject reject-with=icmp-host-unreachable comment=”" disabled=no
add chain=virus protocol=udp dst-port=7000-10000 action=accept comment=”" disabled=no
add chain=virus protocol=tcp dst-port=7000-10000 action=drop comment=”" disabled=yes
add chain=virus protocol=udp dst-port=7000-10000 action=accept comment=”" disabled=no
add chain=virus protocol=tcp dst-port=7000-10000 action=drop comment=”" disabled=yes
add chain=virus dst-address=195.58.176.133 action=drop comment=”" disabled=no
add chain=virus dst-address=62.104.23.40 action=drop comment=”" disabled=no
add chain=virus dst-address=151.189.20.30 action=drop comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=80 action=accept comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=8291 action=accept comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 action=accept comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=5000-5050 action=accept comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=6667-7000 action=accept comment=”" disabled=no add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=110 action=drop comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=tcp src-port=0-65535 dst-port=25 action=drop comment=”" disabled=no
add chain=forward src-address=0.0.0.0/0 dst-address=0.0.0.0/0 src-port=0-65535 dst-port=0-65535 action=drop comment=”" disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop Messenger Worm” disabled=no
add chain=forward connection-state=invalid action=drop comment=”drop invalid connections” disabled=no
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=”Drop Blaster Worm” disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment=”Worm” disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment=”Drop Blaster Worm” disabled=no
add chain=virus protocol=udp dst-port=445 action=drop comment=”Drop Blaster Worm” disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment=”________” disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment=”________” disabled=no
add chain=virus protocol=tcp dst-port=1080 action=drop comment=”Drop MyDoom” disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment=”________” disabled=no
add chain=virus protocol=tcp dst-port=1363 action=drop comment=”ndm requester” disabled=no
add chain=virus protocol=tcp dst-port=1364 action=drop comment=”ndm server” disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment=”screen cast” disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment=”hromgrafx” disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment=”cichlid” disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Beagle Virus” disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop comment=”Drop Dumaru.Y” disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment=”Drop Beagle” disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Drop Beagle.C-K” disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop comment=”Drop MyDoom” disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop comment=”Drop Backdoor OptixPro” disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop comment=”Worm” disabled=no
add chain=virus protocol=udp dst-port=4444 action=drop comment=”Worm” disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop comment=”Drop Sasser” disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop comment=”Drop Beagle.B” disabled=no
add chain=virus protocol=tcp dst-port=9898 action=drop comment=”Drop Dabber.A-B” disabled=no
add chain=virus protocol=tcp dst-port=10080 action=drop comment=”Drop MyDoom.B” disabled=no
add chain=virus protocol=tcp dst-port=12345 action=drop comment=”Drop NetBus” disabled=no
add chain=virus protocol=tcp dst-port=17300 action=drop comment=”Drop Kuang2″ disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment=”Drop SubSeven” disabled=no
add chain=virus protocol=tcp dst-port=65506 action=drop comment=”Drop PhatBot, Agobot, Gaobot” disabled=no
add chain=forward action=jump jump-target=virus comment=”jump to the virus chain” disabled=no