《ROS route PPPOE拨号服务器的搭建程序》(ROS route PPPOE)v.1.1.1

用户共享的电驴资源列表
1线.txt	6.84 KB
全选	6.84 KB

简介:

#本程序用于ROS Router系统平台，来搭建拨号服务器
#程序版本：ver.1.1.1（单线）
#程序开发者：十个口袋
#作者网站:http://www.199du.com/
#程序运行说明：只要输入定义的变量，然后把源码粘贴到 ROS Router终端命令行之上执行既可完成PPPOE拨号服务器的搭建
:global gzDSL1-user gzDSLxxxxx@163.gd
:global gzDSL1-pass XXXXXXX
:global PPPOE-S-NAME an
:global DDNS-NAME
:global DDNS-PWD
:global DDNS-DOMAIN
:global COUT 2
/ip pool add ranges=11.11.11.1-11.11.11.40 name=pool1
/ip address add address=13.13.13.254/255.255.255.0 interface=ether2 comment=lan
/ppp profile add name= PPPOE local-address=12.12.12.254 remote-address=pool1 use-compression=yes use-vj-compression=yes use-encryption=yes change-tcp-mss=yes only-one=yes dns-server=202.96.128.166,202.96.134.133 rate-limit={80k/350k 100k/1000k 80k/300k 7}
/ppp profile add copy-from=PPPOE rate-limit=120k/1000k name=1M
/ppp profile add copy-from=PPPOE rate-limit=80k/300k name=300K
/interface pppoe-client add name=pppoe-out1 interface=ether1 user=$gzDSL1-user password=$gzDSL1-pass add-default-route=yes disabled=no use-peer-dns=yes
/interface pppoe-server server add service-name=$PPPOE-S-NAME interface=ether2 disabled=no default-profile=PPPOE
/ip firewall nat add chain=srcnat out-interface=pppoe-out1 action=masquerade
/ip dns set primary-dns=202.96.128.166 secondary-dns=202.96.128.86
/ip firewall mangle add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1440
/ip dns set allow-remote-requests=yes
/system scheduler add name=reboot interval=24h start-time=04:30:00 on-event={/system reboot} disabled=no
/system scheduler add name=DDNS start-time=00:00:00 interval=00:10:00 on-event={
:log info DDNS: Begin
:global ddns-user hgdongdong110
:global ddns-pass freely
:global ddns-host an001.ddns.ms
:global ddns-interface pppoe-out1
:global ddns-ip [ /ip address get [/ip address find interface=$ddns-interface] address ]
:if ([ :typeof $ddns-lastip ] = nil ) do={ :global ddns-lastip 0.0.0.0/0 }
:if ([ :typeof $ddns-ip ] = nil ) do={
:log info ( DDNS: No ip address present on . $ddns-interface . , please check. )
} else={
:if ($ddns-ip != $ddns-lastip) do={
:log info DDNS: Sending UPDATE!
:log info [ /tool dns-update name=$ddns-host address=[:pick $ddns-ip 0 [:find $ddns-ip / ] ] key-name=$ddns-user key=$ddns-pass ]
:global ddns-lastip $ddns-ip
} else={
:log info DDNS: No change
:global ddns-lastip 0.0.0.0/0
}
}
:log info DDNS: End
}
/ip firewall filter add chain=forward src-address=11.11.11.0/24 p2p=all-p2p action=drop comment= No P2P
/ip firewall filter add chain=forward protocol=tcp dst-port=8008 action=drop comment= No PPlive TV
/ip firewall filter add chain=forward protocol=udp dst-port=4004 action=drop
/ip firewall filter add chain=forward dst-address=218.108.237.11 action=drop
/ip firewall filter add chain=forward protocol=udp dst-port=13000-14000 action=drop comment= No QQLive
/ip firewall filter add chain=forward protocol=tcp dst-port=16881 action=drop comment= No BitSpirit
/ip firewall filter add chain=forward protocol=tcp dst-port=135-139 action=drop comment= No 3B
/ip firewall filter add chain=input protocol=tcp dst-port=21-22 action=drop
/ ip firewall filter add chain=forward protocol=tcp connection-limit=60,32 action=drop disabled=no
/ip firewall filter add chain=forward protocol=tcp dst-port=4661-4662 action=drop comment= No Emule
/ip firewall filter add chain=forward protocol=tcp dst-port=4242 action=drop
/ip firewall filter add chain=forward dst-address=62.241.53.15 action=drop
/ip firewall mangle add chain=prerouting src-address=11.11.11.0/24 protocol=tcp dst-port=443 action=mark-routing new-routing-mark=adsl1 passthrough=no
/ip firewall filter add chain=forward dst-address-add list=BlockadeXunlei action=drop comment= BlockadeXunlei disabled=no
/ip firewall filter add chain=forward dst-address-add list=BlockadeQqXuanFeng action=drop comment= BlockadeQqXuanFeng disabled=no
/ip firewall filter add chain=forward src-address=11.11.11.0/24 protocol=tcp connection-limit=200,32 src-address-add list=!SzwblmTcpadd list action=drop comment= TCP :200 disabled=no
/ip firewall filter add chain=forward p2p=all-p2p action=drop comment= disabled=no
/ip firewall filter add chain=forward src-address=11.11.11.0/24 dst-address=0.0.0.0/0 protocol=icmp packet-size=300-1500 action=drop comment= DROP-ICMP disabled=no
/ip firewall filter add chain=forward src-address=11.11.11.0/24 protocol=udp dst-port=!53 dst-address-add list=All-WAN action=drop comment= disabled=no
/ip firewall filter add chain=input connection-state=invalid action=drop comment= disabled=no
/ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 action=drop comment= disabled=no
/ip firewall mangle add chain=prerouting src-address=11.11.11.0/24 protocol=udp src-address-add list=p2p dst-address-add list=All-WAN action=add-src-to-address-add address-add list=p2p-udp address-add list-timeout=5m30s comment= p2p-udp-LANip disabled=no
/ip firewall mangle add chain=prerouting src-address=11.11.11.0/24 protocol=tcp src-address-add list=p2p dst-address-add list=All-WAN action=add-src-to-address-add address-add list=p2p-tcp address-add list-timeout=5m30s comment= p2p-tcp-LANip disabled=no
/ip firewall mangle add chain=prerouting src-address=11.11.11.0/24 protocol=udp src-address-add list=p2p-s dst-address-add list=All-WAN action=add-src-to-address-add address-add list=p2p-s1 address-add list-timeout=10m10s comment= p2p-udp-max disabled=no
/ip firewall address-list add list=BlockadeXunlei address=58.61.39.209 comment= disabled=no
/ip firewall address-list add list=BlockadeXunlei address=58.61.39.211 comment= disabled=no
/ip firewall address-list add list=BlockadeXunlei address=58.61.39.212 comment= disabled=no
/ip firewall address-list add list=BlockadeQqXuanFeng address=124.115.5.173 comment= disabled=no
/ip firewall address-list add list=BlockadeQqXuanFeng address=119.147.18.173 comment= disabled=no
/ip firewall address-list add list=BlockadeQqXuanFeng address=117.95.243.97 comment= disabled=no
/ip firewall address-list add list=BlockadeQqXuanFeng address=124.115.0.180 comment= disabled=no
/ip firewall address-list add list=All-WAN address=128.0.0.0/1 comment= disabled=yes
/ip firewall address-list add list=All-WAN address=64.0.0.0/2 comment= disabled=no
/ip firewall address-list add list=All-WAN address=32.0.0.0/3 comment= disabled=no
/ip firewall address-list add list=All-WAN address=16.0.0.0/4 comment= disabled=no
/ppp secret
add name=($PPPOE-S-NAME . 1) service=pppoe caller-id= password= 0000 profile=PPPOE routes= limit-bytes-in=0 limit-bytes-out=0
comment= disabled=no
:set i 2; :while($i 51) do={add copy-from=($PPPOE-S-NAME . 1) password=($i*$i+$COUT) name=($PPPOE-S-NAME . $i); :set i ($i+1);}