фильтровать винду можно так:
- по старинке
Код:
create access_profile ip tcp dst_port_mask 0xffff profile_id 1
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 135 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 137 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 138 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 139 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 445 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign ip tcp dst_port 2869 port 1-26 deny
create access_profile ip udp dst_port_mask 0xffff profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 135 port 1-26 deny
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 137 port 1-26 deny
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 138 port 1-26 deny
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 139 port 1-26 deny
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 445 port 1-26 deny
config access_profile profile_id 2 add access_id auto_assign ip udp dst_port 1900 port 1-26 deny
- через PCF
Код:
# протокол IP + пакет не фрагментирован + порт 135, 137, 138, 139, 445
create access_profile packet_content_mask offset_16-31 0xffff0000 0x0 0x00ff0000 0x0 offset_32-47 0x0 0x0 0xffff0000 0x0 profile_id 1
config access_profile profile_id 1 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000000 0x0 offset_32-47 0x0 0x0 0x00870000 0x0 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000000 0x0 offset_32-47 0x0 0x0 0x00890000 0x0 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000000 0x0 offset_32-47 0x0 0x0 0x008a0000 0x0 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000000 0x0 offset_32-47 0x0 0x0 0x008b0000 0x0 port 1-26 deny
config access_profile profile_id 1 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000000 0x0 offset_32-47 0x0 0x0 0x01bd0000 0x0 port 1-26 deny
# протокол IP + пакет не фрагментирован + протокол TCP/UDP + порт 1900, 2869
create access_profile packet_content_mask offset_16-31 0xffff0000 0x0 0x00ff00ff 0x0 offset_32-47 0x0 0x0 0xffff0000 0x0 profile_id 2
config access_profile profile_id 2 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000011 0x0 offset_32-47 0x0 0x0 0x076c0000 0x0 port 1-25 deny
config access_profile profile_id 2 add access_id auto_assign packet_content_mask offset_16-31 0x08000000 0x0 0x00000006 0x0 offset_32-47 0x0 0x0 0x0b350000 0x0 port 1-25 deny