Have some problem with access to router. After i set firewall rules:
Code: Select all
0 ;;; Established Connections
chain=input action=accept connection-state=established
1 ;;; Related Connections
chain=input action=accept connection-state=related
2 ;;; Log Invalid Connections
chain=input action=log connection-state=invalid log-prefix="INVALID"
3 ;;; Drop Invalid Connections
chain=input action=drop connection-state=invalid
4 ;;; !!! Check For Well-Known Viruses !!!
chain=input action=jump jump-target=virus
5 ;;; UDP
chain=input action=accept protocol=udp
6 ;;; ICMP
chain=input action=accept protocol=icmp
7 ;;; Allow PPTP
chain=input action=accept protocol=tcp dst-port=1723
8 ;;; Allow PPTP
chain=input action=accept protocol=gre
9 ;;; Allow OSPF
chain=input action=accept protocol=ospf
15 ;;; Log Invalid Connections
chain=forward action=log connection-state=invalid log-prefix="INVALID"
16 ;;; !!! Check For Well-Known Viruses !!!
chain=forward action=jump jump-target=virus
17 ;;; UDP
chain=forward action=accept protocol=udp
18 ;;; ICMP
chain=forward action=accept protocol=icmp
19 ;;; Drop Blaster Worm
chain=virus action=drop protocol=tcp dst-port=135-139
20 ;;; Drop Messenger Worm
chain=virus action=drop protocol=udp dst-port=135-139
21 ;;; Drop Blaster Worm
chain=virus action=drop protocol=tcp dst-port=445
22 ;;; Drop Messenger Worm
chain=virus action=drop protocol=udp dst-port=445
23 ;;; .................
chain=virus action=drop protocol=tcp dst-port=593
24 ;;; .................
chain=virus action=drop protocol=tcp dst-port=1024-1030
20 ;;; Drop Messenger Worm
chain=virus action=drop protocol=udp dst-port=135-139
21 ;;; Drop Blaster Worm
chain=virus action=drop protocol=tcp dst-port=445
22 ;;; Drop Messenger Worm
chain=virus action=drop protocol=udp dst-port=445
23 ;;; .................
chain=virus action=drop protocol=tcp dst-port=593
24 ;;; .................
chain=virus action=drop protocol=tcp dst-port=1024-1030
