filter port virus
2000 Cracks 6776 TCP
Acid Battery 32418 TCP
Acid Battery 2000 52317 TCP
Acid Shivers 10520 TCP
Agent 31 31 TCP
Agent 40421 40421 TCP
Aim Spy 777 TCP
Ajan 25 TCP
Ambush 10666 UDP
AntiGen 25 TCP
AOL Trojan 30029 TCP
Attack FTP 666 TCP
Back Construction 666/5400/5401 TCP
Back Door Setup 5000/5001/7789 TCP
Back Orifice 31337/31338 UDP
Back Orifice 2000 8787/54320/54321 TCP
Back Orifice DLL 1349 UDP
BackDoor 1999 TCP
BackDoor-G 1243/6776 TCP
BackDoor-QE 10452 TCP
BackDoor-QO 3332 TCP
BackDoor-QR 12973/12975 TCP
BackFire 31337 UDP
Baron Night 31337 TCP
Big Gluck (TN) 34324 TCP
BioNet 12349 TCP
Bla 1042/20331 TCP
Black Construction 21 TCP
Blade Runner 21/5400-5402 TCP
BO client 31337 TCP
BO Facil 5556/5557/31337 TCP
Bo Wack 31336 TCP
BoBo 4321 TCP
BOWhack 31666 TCP
BrainSpy 10101 TCP
Bubbel 5000 TCP
BugBear 36794 TCP
Bugs 2115 TCP
Bunker-Hill 61348/61603/63485 TCP
Cain e Abel 666 TCP
Chargen 9 UDP
Chupacabra 20203 TCP
Coma 10607 TCP
Cyber Attacker 9876 TCP
Dark Shadow 911 TCP
Death 2 TCP
Deep Back Orifice 31338 UDP
Deep Throat 41/2140/3150/6771 TCP
Deep Throat v2 2140/3150/6670/6711/60000 TCP
Deep Throat v3 6674 TCP
DeepBO 31337 UDP
DeepThroat 999 TCP
Delta Source 26274 UDP
Delta Source 47262 UDP
Der Spacher 3 1000/1001/2000/2001 TCP
Devil 65000 TCP
Digital RootBeer 2600 TCP
DMsetup 58/59 TCP
DNS 53 TCP
Doly Trojan 21/1010-1012/1015 TCP
Donald Dick 23476/23477 TCP
DRAT 48/50 TCP
DUN Control 12623 UDP
Eclipse 2000 3459 TCP
Eclypse 3801 UDP
Email Password Sender 25 TCP
Evil FTP 23456 TCP
Executer 80 TCP
File Nail 4567 TCP
Firehotcker 79/5321 TCP
Fore 21/50766 TCP
FTP - Trojan 21 TCP
FTP99cmp 1492 TCP
Gaban Bus 12345/12346 TCP
Gate Crasher 6969/6970 TCP
GirlFriend 21554 TCP
Gjamer 12076 TCP
Hack '99 KeyLogger 12223 TCP
Hack 'a' Tack 31780/31785/31787-31789 TCP
Hack 'a' Tack 31791/31792 UDP
HackCity Ripper Pro 2023 TCP
Hackers Paradise 31/456 TCP
HackOffice 8897 TCP
Haebu Coceda 25 TCP
Happy 99 25/119 TCP
Hidden Port 99 TCP
Hooker 80 TCP
Host Control 6669/11050 TCP
HVL Rat5 2283 TCP
icKiller 7789 TCP
ICQ (ICQ.com - community, people search and messaging service!) 1027/1029/1032 TCP
ICQ Revenge 16772/19864 TCP
ICQ Trojan 4590 TCP
Illusion Mailer 2155/5512 TCP
InCommand 9400 TCP
Indoctrination 6939 TCP
Infector 146 TCP
Infector 146 UDP
iNi-Killer 555/9989 TCP
Insane Network 2000 TCP
Invisible FTP 21 TCP
IRC-3 6969 TCP
JammerKillah 121 TCP
Kazimas 113/7000 TCP
Kuang2 25/17300/30999 TCP
Larva 21 TCP
Logged 20203 TCP
Masters' Paradise 31/3129/40421-40423/40425-40426 TCP
Mavericks Matrix 1269 TCP
Millenium 20000-20001 TCP
MiniCommand 1050 TCP
Mosucker 16484 TCP
Nephron 17777 TCP
Net Administrator 21/555 TCP
Net Controller 123 TCP
Netbios datagram (DoS Attack) 138 TCP
Netbios name (DoS Attack) 137 TCP
Netbios session (DoS Attack) 139 TCP
NetBus 12345-12346 TCP
NetBus Pro 20034 TCP
NetMetropolitan 5031 TCP
NetMonitor 7300-7301/7306-7308 TCP
NetRaider 57341 TCP
NETrojan 1313 TCP
NetSphere 30100-30103 TCP
NetSpy 1024/1033/31338-31339 TCP
NewApt 25 TCP
NoBackO 1200-1201 UDP
One of the Last Trojan (OOTLT) 5011 TCP
OpC BO 1969 TCP
PC Crasher 5637-5638 TCP
Phase Zero 555 TCP
Phineas Phucker 2801 TCP
Pie Bill Gates 12345 TCP
Portal of Doom 3700/9872-9875 TCP
Portal of Doom 10067/10167 UDP
Priority 6969/16969 TCP
Progenic 11223 TCP
ProMail Trojan 25/110 TCP
Prosiak 22222/33333 TCP
Psyber Stream Server 1024/1170/1509/4000 TCP
Rasmin 531/1045 TCP
RAT 1095/1097-1099/2989 TCP
RC 65535 TCP
Rcon 8989 TCP
Remote Grab 7000 TCP
Remote Windows Shutdown 53001 TCP
RingZero 80/3128/8080 TCP
Robo-Hack 5569 TCP
Satanz backDoor 666 TCP
ScheduleAgent 6667 TCP
School Bus 54321 TCP
Schwindler 21554/50766 TCP
Secret Agent 11223 TCP
Secret Service 605/6272 TCP
Senna Spy FTP Server 21/11000/13000 TCP
ServeMe 5555 TCP
ServeU 666 TCP
Shadow Phyre 666 TCP
Shit Heep 6912 TCP
ShockRave 1981 TCP
Shtirlitz 25 TCP
Sivka-Burka 1600 TCP
SK Silencer 1001 TCP
Socket25 30303 TCP
Sockets de Troie 5000-5001/30303/50505 TCP
SoftWAR 1207 TCP
Spirit 2001a 33911 TCP
SpySender 1807 TCP
Stealth 25 TCP
Stealth Spy 555 TCP
Streaming Audio trojan 1170 TCP
Striker 2565 TCP
SubSeven 1243/2773/6711-6713/6776/7000/7215
/27374/27573/54283 TCP
SubSeven Apocalypse 1243 TCP
Syphillis 10086 TCP
Tapiras 25 TCP
TCP Wrappers 421 TCP
TeleCommando 61466 TCP
Terminator 25 TCP
Terror Trojan 3456 TCP
The Invasor 2140/3150 TCP
The Prayer 2716/9999 TCP
The Spy 40412 TCP
The Thing 6000/6400 TCP
The Traitor 65432 TCP
The Traitor 65432 UDP
The Trojan Cow 2001 TCP
The Unexplained 29891 UDP
Tiny Telnet Server 23/34324 TCP
TransScout 1999-2005/9878 TCP
Trinoo 34555/35555 UDP
Truva Atl 23 TCP
Ugly FTP 23456 TCP
Ultor's Trojan 1234 TCP
Vampire 1020 TCP
Vampyre 6669 TCP
Virtual Hacking Machine 4242 TCP
Voice 1024/1170/4000 TCP
Voodoo Doll 1245 TCP
Wack-a-mole 12361-12362 TCP
Web Ex 21/1001 TCP
WhackJob 12631/23456 TCP
WinCrash 21/2583/3024/4092/5714/5741-5742 TCP
WinGate (socks-proxy) 1080 TCP
WinHole 1080/1082 TCP
WinNuke 135/139 TCP
WinPC 25 TCP
WinSatan 999 TCP
WinSpy 25 TCP
X-bill 12345-12346 TCP
Xplorer 2300 TCP
Xtcp 5550 TCP
Xtreme 1090 TCP
YAT 37651
...
-------=[ Blok di Web proxy access ]=-------------------------------------------
ip web-proxy access print
Flags: X - disabled, I - invalid
0 ;;; block telnet & spam e-mail relaying
dst-port=23-25 action=deny
1 ;;; microsoft
url="
[You must be registered and logged in to see this link.] action=deny
2 url="http://update.microsoft.com/windowsupdate/v6/default.aspx"
action=deny
3 url="http://windowsupdate.microsoft.com/" action=deny
4 url="http://go.microsoft.com" action=deny
5 url="http://support.microsoft.com/" action=deny
6 url="v4.windowsupdate.microsoft.com/" action=deny
7 url="http://office.microsoft.com" action=deny
8 ;;; youtube
url="http*youtube*get_video*" action=deny
9 url="":\\.flv$"" action=deny
10 url="
[You must be registered and logged in to see this link.] action=deny
11 url="
[You must be registered and logged in to see this link.] action=deny
12 url="":\\.mp3$"" action=deny
13 ;;; video google
url="http*videoplay*" action=deny
14 url="":\\.exe$"" action=deny
15 url="":\\.zip$"" action=deny
--------------------------------------------------------------------------------
-------=[ Malware Filter 01 ]=-------------------------------------------
/ip firewall filter
add chain=input in-interface="Link" protocol=tcp ou UDP dst-port=porta do virus
action=drop comment="NOME DO VIRUS" disabled=no
add chain=ICMP protocol=icmp limit=1,2 action=log log-prefix="" comment="logit" disabled=no
--------------------------------------------------------------------------------
-------=[ Port Knocking ]=-------------------------------------------
;;; Lihatin Lognya
chain=input in-interface=externa src-address=0.0.0.0/0 protocol=tcp
dst-port=7777 action=log prefix=7777
;;; Port Knocking SSH - Interface Externa
chain=input in-interface=externa src-address=0.0.0.0/0 protocol=tcp
dst-port=7777 action=add-src-to-address-list address-list=ssh_ok address-list-timeout=2h
chain=input in-interface=externa src-address=0.0.0.0/0 protocol=tcp action=log
;;; Port Knocking SSH - Interface Externa
chain=input in-interface=externa src-address=0.0.0.0/0 protocol=tcp dst-port=80
action=add-src-to-address-list address-list=ssh_ok address-list-timeout=1h
;;; Acepto SSH Verificado - Port Knocking Interface Externa
chain=input in-interface=externa src-address=0.0.0.0/0 protocol=tcp dst-port=22
src-address-list=ssh_ok action=accept
;;; Dropeo Resto SSH
chain=input src-address=0.0.0.0/0 protocol=tcp dst-port=22 action=drop
--------------------------------------------------------------------------------
-------=[ Malware Filter 02 ]=-------------------------------------------
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage3 action=reject
reject-with=tcp-reset comment="Autofirewall SSH - Block/Log" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage2
action=add-src-to-address-list address-list=AutoFirewall-Stage3
address-list-timeout=5m comment="Autofirewall SSH - Stage3" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage1
action=add-src-to-address-list address-list=AutoFirewall-Stage2
address-list-timeout=1m comment="Autofirewall SSH - Stage2" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new action=add-src-to-address-list
address-list=AutoFirewall-Stage1 address-list-timeout=1m
comment="Autofirewall SSH - Stage1" disabled=no
/ip firewall filter add chain=input protocol=tcp dst-port=22-23
connection-state=new action=jump jump-target=AutoFirewall comment="" disabled=no
/ip firewall filter add chain=forward protocol=tcp dst-port=22-23
connection-state=new dst-address-list=ProtectedAddressSpace
action=jump jump-target=AutoFirewall comment="" disabled=no
/ ip firewall address-list add list=ProtectedAddressSpace
address=aa.bb.cc.dd/zz comment="" disabled=no
/ ip firewall address-list add list=ProtectedAddressSpace
address=aa.bb.cc.ee/zz comment="" disabled=no
--------------------------------------------------------------------------------
-------=[ Malware Filter 02 ]=-------------------------------------------
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage3 action=reject
reject-with=tcp-reset comment="Autofirewall SSH - Block/Log" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage2
action=add-src-to-address-list address-list=AutoFirewall-Stage3
address-list-timeout=5m comment="Autofirewall SSH - Stage3" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new src-address-list=AutoFirewall-Stage1
action=add-src-to-address-list address-list=AutoFirewall-Stage2
address-list-timeout=1m comment="Autofirewall SSH - Stage2" disabled=no
/ip firewall filter add chain=AutoFirewall protocol=tcp dst-port=22-23
connection-state=new action=add-src-to-address-list
address-list=AutoFirewall-Stage1 address-list-timeout=1m
comment="Autofirewall SSH - Stage1" disabled=no
/ip firewall filter add chain=input protocol=tcp dst-port=22-23
connection-state=new action=jump jump-target=AutoFirewall comment="" disabled=no
--------------------------------------------------------------------------------
-------=[ Malware Filter 03 ]=-------------------------------------------
/ip firewall filter add chain=input protocol=tcp dst-port=1234
action=add-src-to-address-list address-list=list_a address-list-timeout=15s
/ip firewall filter add chain=input protocol=tcp dst-port=2345
src-address-list=list_a action=add-src-to-address-list address-list=list_b
address-list-timeout=2h
/ip firewall filter add chain=input protocol=tcp dst-port=22
src-address-list=list_b action=accept
--------------------------------------------------------------------------------
-------=[ Malware Filter 04 ]=-------------------------------------------
/ ip firewall filter
add chain=input protocol=tcp dst-port=22 connection-limit=1,32
action=add-src-to-address-list address-list=ssh_logins
address-list-timeout=2m comment="" disabled=no
add chain=input protocol=tcp dst-port=22 src-address-list=!ssh_logins
action=accept comment="" disabled=no
--------------------------------------------------------------------------------
-------=[ Malware Filter 05 ]=-------------------------------------------
add chain=forward src-address=192.168.1.10 protocol=tcp src-port=21
content="password incorrect" action=add-dst-to-address-list
address-list=ftp_logins address-list-timeout=1m comment="" disabled=no
add chain=forward src-address-list=ftp_logins action=drop comment="" disabled=no
----------------------------------------------------------------------------------
--------------- web proxy clean otomatic -----------------------------------------
NAT Proxy
/ ip firewall nat add chain=dstnat src-address=10.0.0.0/16 dst-address=0.0.0.0/0 protocol=tcp dst-port=80
action=redirect to-ports=3126 comment=”Proxy” disabled=no
Proxy-off
/ system script add name=”Proxy-off” source=”/ip firewall nat set [/ip firewall nat find
comment=”Proxy”] disable=yes
n/ip web-proxy set enabled=no”
policy=ftp,reboot,read,write,policy,test,winbox,password
Proxy-limpacache
/ system script add name=”Proxy-limpacache” source=”/ip web-proxy clear-cache”
policy=ftp,reboot,read,write,policy,test,winbox,password
Proxy-on
/ system script add name=”Proxy-on” source=”/ip web-proxy set enabled=yes
n/ip firewall nat
set [/ip firewall nat find comment=”Proxy”] disable=no
n”
policy=ftp,reboot,read,write,policy,test,winbox,password
--------------------------------------------------------------------------------
scheduler proxy-off
/ system scheduler add name=”control-proxy-off” on-event=Proxy-off
start-date=nov/29/2006 start-time=02:30:00 interval=15d comment=”" disabled=no
scheduler proxy-limpacache
/ system scheduler add name=”control-proxy-limpacache” \
on-event=Proxy-limpacache start-date=nov/29/2006 start-time=02:31:00 \
interval=15d comment=”" disabled=no
scheduler proxy-on
/ system scheduler add name=”controle-proxy-on” on-event=Proxy-on
start-date=nov/29/2006 start-time=02:40:00 interval=15d comment=”" disabled=no
--------------------------------------------------------------------------------
------------------------ Firewall Virus ----------------------------------------------
/ ip firewall filter
add chain=Virus protocol=tcp dst-port=1434 action=drop comment="port block
warning" disabled=no
add chain=Virus protocol=udp dst-port=1434 action=drop comment="" disabled=no
add chain=Virus protocol=udp dst-port=2745 action=drop comment="" disabled=no
add chain=Virus protocol=tcp dst-port=6344-6381 action=drop comment="" \
disabled=no
add chain=Virus protocol=udp dst-port=6344-6381 action=drop comment="" \
disabled=no
add chain=Virus protocol=tcp dst-port=1080 action=drop comment="MyDoom" \
disabled=no
add chain=Virus protocol=tcp dst-port=1214 action=drop comment="" disabled=no
add chain=Virus protocol=tcp dst-port=593 action=drop comment="" disabled=no
add chain=Virus protocol=tcp dst-port=1024-1030 action=drop comment="" \
disabled=no
add chain=Virus protocol=tcp dst-port=135-139 action=drop comment="Blaster
Worm" disabled=no
add chain=Virus protocol=udp dst-port=135-139 action=drop comment="Messenger
Worm" disabled=no
add chain=Virus protocol=tcp dst-port=445 action=drop comment="Blaster Worm" \
disabled=no
add chain=Virus protocol=udp dst-port=445 action=drop comment="Blaster Worm" \
disabled=no
add chain=Virus protocol=tcp dst-port=1363 action=drop comment="ndm requester" \
disabled=no
add chain=Virus protocol=tcp dst-port=1364 action=drop comment="ndm server" \
disabled=no
add chain=Virus protocol=tcp dst-port=1368 action=drop comment="screen cast" \
disabled=no
add chain=Virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx" \
disabled=no
add chain=Virus protocol=tcp dst-port=1377 action=drop comment="cichlid" \
disabled=no
add chain=Virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm" \
disabled=no
add chain=Virus protocol=tcp dst-port=2745 action=drop comment="Bagle Virus" \
disabled=no
add chain=Virus protocol=tcp dst-port=2283 action=drop comment="Drop Dumaru.Y" \
disabled=no
add chain=Virus protocol=tcp dst-port=2235 action=drop comment="Drop Beagle" \
disabled=no
add chain=Virus protocol=tcp dst-port=2745 action=drop comment="Drop
Beagle.C-K" disabled=no
add chain=Virus protocol=tcp dst-port=3127-3128 action=drop comment="Drop
MyDoom" disabled=no
add chain=Virus protocol=tcp dst-port=3410 action=drop comment="Drop Backdoor
OptixPro" disabled=no
add chain=Virus protocol=tcp dst-port=4444 action=drop comment="Worm" \
disabled=no
add chain=Virus protocol=udp dst-port=4444 action=drop comment="Worm" \
disabled=no
add chain=Virus protocol=tcp dst-port=5554 action=drop comment="Drop Sasser" \
disabled=no
add chain=Virus protocol=tcp dst-port=8866 action=drop comment="Drop Beagle.B" \
disabled=no
add chain=Virus protocol=tcp dst-port=9898 action=drop comment="Drop
Dabber.A-B" disabled=no
add chain=Virus protocol=tcp dst-port=10000 action=drop comment="Drop
Dumaru.Y" disabled=no
add chain=Virus protocol=tcp dst-port=10080 action=drop comment="Drop
MyDoom.B" disabled=no
add chain=Virus protocol=tcp dst-port=12345 action=drop comment="Drop NetBus" \
disabled=no
add chain=Virus protocol=tcp dst-port=17300 action=drop comment="Drop Kuang2" \
disabled=no
add chain=Virus protocol=tcp dst-port=65506 action=drop comment="Drop PhatBot,
Agobot, Gaobot" disabled=no
add chain=Virus protocol=tcp dst-port=27374 action=drop comment="Drop
SubSeven" disabled=no
# forward
add chain=forward connection-state=invalid action=drop comment="" disabled=no
add chain=forward connection-state=related action=accept comment="" \
disabled=no
add chain=forward connection-state=established action=accept comment="" \
disabled=no
add chain=forward action=jump jump-target=Virus comment="" disabled=no
# input
add chain=input connection-state=invalid action=drop comment="" disabled=no
add chain=input connection-state=related action=accept comment="" disabled=no
add chain=input connection-state=established action=accept comment="" \
disabled=no
add chain=input action=jump jump-target=Virus comment="" disabled=no
--------------------------------------------------------------------------------
----------------------------=[ Drop port scanner =]-------------------------------------------------
/ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 \
action=add-src-to-address-list address-list="port scanners" \
address-list-timeout=14d comment="Port scanners to list " disabled=no
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg \
action=add-src-to-address-list \address-list="port scanners" address-list-timeout=14d comment="NMAP FIN Stealth scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn \
action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="SYN/FIN scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=syn,rst \
action=add-src-to-address-list address-list="port scanners" address-list-timeout=14d comment="SYN/RST scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack \
action=add-src-to-address-list \address-list="port scanners" address-list-timeout=14d comment="FIN/PSH/URG scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg \
action=add-src-to-address-list \address-list="port scanners" address-list-timeout=14d comment="ALL/ALL scan"
/ip firewall filter add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg \
action=add-src-to-address-list \address-list="port scanners" address-list-timeout=14d comment="NMAP NULL scan"
/ip firewall filter add chain=input src-address-list="port scanners" action=drop \
comment="dropping port scanners" disabled=no
--------------------------------------------------------------------------------
-------------------------=[ filter malware ]----------------------------------------
/ip firewall filter add chain=virus comment="Reglas Antivirus"
/ip firewall filter add chain=forward connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
/ip firewall filter add chain=forward connection-state=established action=accept comment="Established Connections" disabled=no
/ip firewall filter add chain=forward connection-state=related action=accept comment="Related connections" disabled=no
/ip firewall filter add chain=forward action=jump jump-target=virus comment="!!! Check for well-known viruses !!!" disabled=no
/ip firewall filter add chain=forward protocol=udp action=accept comment="UDP" disabled=no
/ip firewall filter add chain=forward protocol=icmp limit=50/5,2 action=accept comment="Allow limited Pings" disabled=no
/ip firewall filter add chain=forward protocol=icmp action=drop comment="Drop excess pings" disabled=no
/ip firewall filter add chain=input connection-state=invalid action=drop comment="Drop invalid connections" disabled=no
/ip firewall filter add chain=input tcp-flags=!syn connection-state=established action=accept comment="Accept established connections" disabled=no
/ip firewall filter add chain=input connection-state=related action=accept comment="Accept related connections" disabled=no
/ip firewall filter add chain=input action=jump jump-target=virus comment="!!! Check for well-known viruses !!!" disabled=no
/ip firewall filter add chain=input protocol=udp action=accept comment="UDP" disabled=no
/ip firewall filter add chain=input protocol=icmp limit=50/5,2 action=accept comment="Allow limited pings" disabled=no
/ip firewall filter add chain=input protocol=icmp action=drop comment="Drop excess pings" disabled=no
/ip firewall filter add chain=input dst-port=22 protocol=tcp action=accept comment="SSH for demo purposes" disabled=no
/ip firewall filter add chain=input dst-port=23 protocol=tcp action=accept comment="Telnet for demo purposes" disabled=no
/ip firewall filter add chain=input dst-port=80 protocol=tcp action=accept comment="http for demo purposes" disabled=no
/ip firewall filter add chain=input dst-port=3987 protocol=tcp action=accept comment="winbox for demo purposes" disabled=no
/ip firewall filter add chain=input action=accept log=yes comment="Log and drop everything else" disabled=no
/ip firewall filter add chain=virus dst-port=135-139 protocol=tcp action=drop comment="Drop Blaster Worm" disabled=no
/ip firewall filter add chain=virus dst-port=135-139 protocol=udp action=drop comment="Drop Messenger Worm" disabled=no
/ip firewall filter add chain=virus dst-port=445 protocol=tcp action=drop comment="Drop Blaster Worm" disabled=no
/ip firewall filter add chain=virus dst-port=445 protocol=udp action=drop comment="Drop Blaster Worm" disabled=no
/ip firewall filter add chain=virus dst-port=593 protocol=tcp action=drop comment="________" disabled=no
/ip firewall filter add chain=virus dst-port=1024-1030 protocol=tcp action=drop comment="________" disabled=no
/ip firewall filter add chain=virus dst-port=1080 protocol=tcp action=drop comment="Drop MyDoom" disabled=no
/ip firewall filter add chain=virus dst-port=1214 protocol=tcp action=drop comment="________" disabled=no
/ip firewall filter add chain=virus dst-port=1363 protocol=tcp action=drop comment="ndm requester" disabled=no
/ip firewall filter add chain=virus dst-port=1364 protocol=tcp action=drop comment="ndm server" disabled=no
/ip firewall filter add chain=virus dst-port=1368 protocol=tcp action=drop comment="screen cast" disabled=no
/ip firewall filter add chain=virus dst-port=1373 protocol=tcp action=drop comment="hromgrafx" disabled=no
/ip firewall filter add chain=virus dst-port=1377 protocol=tcp action=drop comment="cichlid" disabled=no
/ip firewall filter add chain=virus dst-port=1433-1434 protocol=tcp action=drop comment="Worm" disabled=no
/ip firewall filter add chain=virus dst-port=2745 protocol=tcp action=drop comment="Bagle Virus" disabled=no
/ip firewall filter add chain=virus dst-port=2283 protocol=tcp action=drop comment="Drop Dumaru.Y" disabled=no
/ip firewall filter add chain=virus dst-port=2535 protocol=tcp action=drop comment="Drop Beagle" disabled=no
/ip firewall filter add chain=virus dst-port=2745 protocol=tcp action=drop comment="Drop Beagle.C-K" disabled=no
/ip firewall filter add chain=virus dst-port=3127-3128 protocol=tcp action=drop comment="Drop MyDoom" disabled=no
/ip firewall filter add chain=virus dst-port=3410 protocol=tcp action=drop comment="Drop Backdoor OptixPro" disabled=no
/ip firewall filter add chain=virus dst-port=4444 protocol=tcp action=drop comment="Worm" disabled=no
/ip firewall filter add chain=virus dst-port=4444 protocol=udp action=drop comment="Worm" disabled=no
/ip firewall filter add chain=virus dst-port=5554 protocol=tcp action=drop comment="Drop Sasser" disabled=no
/ip firewall filter add chain=virus dst-port=8866 protocol=tcp action=drop comment="Drop Beagle.B" disabled=no
/ip firewall filter add chain=virus dst-port=9898 protocol=tcp action=drop comment="Drop Dabber.A-B" disabled=no
/ip firewall filter add chain=virus dst-port=10000 protocol=tcp action=drop comment="Drop Dumaru.Y" disabled=no
/ip firewall filter add chain=virus dst-port=10080 protocol=tcp action=drop comment="Drop MyDoom.B" disabled=no
/ip firewall filter add chain=virus dst-port=12345 protocol=tcp action=drop comment="Drop NetBus" disabled=no
/ip firewall filter add chain=virus dst-port=17300 protocol=tcp action=drop comment="Drop Kuang2" disabled=no
/ip firewall filter add chain=virus dst-port=27374 protocol=tcp action=drop comment="Drop SubSeven" disabled=no
/ip firewall filter add chain=virus dst-port=65506 protocol=tcp action=drop comment="Drop PhatBot, Agobot, Gaobot" disabled=no
--------------------------------------------------------------------------------
----------------------------=[filter umum]-----------------------------------
/ ip firewall filter
add chain=input connection-state=established comment="Accept established connections"
add chain=input connection-state=related comment="Accept related connections"
add chain=input connection-state=invalid action=drop comment="Drop invalid connections"
add chain=input protocol=udp action=accept comment="UDP" disabled=no
add chain=input protocol=icmp limit=50/5s,2 comment="Allow limited pings"
add chain=input protocol=icmp action=drop comment="Drop excess pings"
add chain=input protocol=tcp dst-port=22 comment="SSH for secure shell"
add chain=input protocol=tcp dst-port=8291 comment="winbox"
# Edit these rules to reflect your actual IP addresses! #
add chain=input src-address=159.148.172.192/28 comment="From Mikrotikls network"
add chain=input src-address=10.0.0.0/8 comment="From our private LAN"
# End of Edit #
add chain=input action=log log-prefix="DROP INPUT" comment="Log everything else"
add chain=input action=drop comment="Drop everything else"
--------------------------------------------------------------------------------
------------------------------=[Filter situs p0rn0]=-------------------------------
add url="ds.eyeblaster.com" action=deny comment="" disabled=no
add url="duolaimi.net" action=deny comment="" disabled=no
add url="dutch-#.com" action=deny comment="" disabled=no
add url="dvdbank.org" action=deny comment="" disabled=no
add url="eager-#.com" action=deny comment="" disabled=no
add url="eases.net" action=deny comment="" disabled=no
add url="easyantispy.com" action=deny comment="" disabled=no
add url="easycategories.com" action=deny comment="" disabled=no
add url="easy-search.net" action=deny comment="" disabled=no
add url="ecosrioplatenses.org" action=deny comment="" disabled=no
add url="ecstasyporn.net" action=deny comment="" disabled=no
add url="ehg-bestbuy.hitbox.com" action=deny comment="" disabled=no
add url="ehg-dig.hitbox.com" action=deny comment="" disabled=no
add url="ehg-espn.hitbox.com" action=deny comment="" disabled=no
add url="ehg-intel.hitbox.com" action=deny comment="" disabled=no
add url="ehg-macromedia.hitbox.com" action=deny comment="" disabled=no
add url="eikokoike.com" action=deny comment="" disabled=no
add url="e-localad.com" action=deny comment="" disabled=no
add url="engage.speedera.net" action=deny comment="" disabled=no
add url="e-plus.cc" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="ergosites.com" action=deny comment="" disabled=no
add url="erie.smartage.com" action=deny comment="" disabled=no
add url="ergosites.com" action=deny comment="" disabled=no
add url="erie.smartage.com" action=deny comment="" disabled=no
add url="etad.telegraph.co.uk" action=deny comment="" disabled=no
add url="eur.yimg.com" action=deny comment="" disabled=no
add url="euuu.com" action=deny comment="" disabled=no
add url="evidence-detector.biz" action=deny comment="" disabled=no
add url="evilspidercomics.com" action=deny comment="" disabled=no
add url="ewebsearch.net" action=deny comment="" disabled=no
add url="e-websitesolutions.com" action=deny comment="" disabled=no
add url="excellentsckin.com" action=deny comment="" disabled=no
add url="exit.megago.com" action=deny comment="" disabled=no
add url="extremeseek.net" action=deny comment="" disabled=no
add url="ez-searching.com" action=deny comment="" disabled=no
add url="f*ckdenniss.com" action=deny comment="" disabled=no
add url="f*cknicepics.com" action=deny comment="" disabled=no
add url="faithstevens.com" action=deny comment="" disabled=no
add url="fantasiewelten.com" action=deny comment="" disabled=no
add url="farmsteadbandb.com" action=deny comment="" disabled=no
add url="fartpost.com" action=deny comment="" disabled=no
add url="fastmetasearch.com" action=deny comment="" disabled=no
add url="fastwebfinder.com" action=deny comment="" disabled=no
add url="faxporn.com" action=deny comment="" disabled=no
add url="featured-results.com" action=deny comment="" disabled=no
add url="fickenisgeil.de" action=deny comment="" disabled=no
add url="fickenisgeil.de" action=deny comment="" disabled=no
add url="finance-loans.com" action=deny comment="" disabled=no
add url="find4u.net" action=deny comment="" disabled=no
add url="find-itnow.com" action=deny comment="" disabled=no
add url="findit-now.com" action=deny comment="" disabled=no
add url="findloss.com" action=deny comment="" disabled=no
add url="findthesite.com" action=deny comment="" disabled=no
add url="findthewebsiteyouneed.com" action=deny comment="" disabled=no
add url="find-uk-health.co.uk" action=deny comment="" disabled=no
add url="findwhatevernow.com" action=deny comment="" disabled=no
add url="fionasteel.com" action=deny comment="" disabled=no
add url="firstbookmark.net" action=deny comment="" disabled=no
add url="fitness-free.com" action=deny comment="" disabled=no
add url="fl01.ct2.comclick.com" action=deny comment="" disabled=no
add url="focusin.ads.targetnet.com" action=deny comment="" disabled=no
add url="foodvacations.net" action=deny comment="" disabled=no
add url="forex.jps.ru" action=deny comment="" disabled=no
add url="forexcredit.com" action=deny comment="" disabled=no
add url="forexcredit.ru" action=deny comment="" disabled=no
add url="formingfusions.com" action=deny comment="" disabled=no
add url="forsythfire.net" action=deny comment="" disabled=no
add url="forthline.com" action=deny comment="" disabled=no
add url="fp.valueclick.com" action=deny comment="" disabled=no
add url="free4porno.net" action=deny comment="" disabled=no
add url="free64all.com" action=deny comment="" disabled=no
add url="freebookmark.net" action=deny comment="" disabled=no
add url="freebookmarks.net" action=deny comment="" disabled=no
add url="freecategories.com" action=deny comment="" disabled=no
add url="free-chipes.com" action=deny comment="" disabled=no
add url="freecj.com" action=deny comment="" disabled=no
add url="freecoolhost.com" action=deny comment="" disabled=no
add url="free-f*cking-video.com" action=deny comment="" disabled=no
add url="free-hit.com" action=deny comment="" disabled=no
add url="a.com" action=deny comment="" disabled=no
add url="free-pics-and-a.com" action=deny comment="" disabled=no
add url="freerbhost.com" action=deny comment="" disabled=no
add url="freescratchandwin.com" action=deny comment="" disabled=no
add url="free-#-a-clips.net" action=deny comment="" disabled=no
add url="freeshemalepics.net" action=deny comment="" disabled=no
add url="freeyaho.com" action=deny comment="" disabled=no
add url="freshseek.com" action=deny comment="" disabled=no
add url="freshteensite.com" action=deny comment="" disabled=no
add url="
[You must be registered and logged in to see this link.] action=deny comment="" disabled=no
add url="funny-girls.com" action=deny comment="" disabled=no
add url="gabrielscott.com" action=deny comment="" disabled=no
add url="gadgeteer.pdamart.com" action=deny comment="" disabled=no
add url="galpostgirls.com" action=deny comment="" disabled=no
add url="gals-for-free.com" action=deny comment="" disabled=no
add url="gambling-online4you.com" action=deny comment="" disabled=no
add url="gameterror.net" action=deny comment="" disabled=no
add url="ganges.imagine-inc.com" action=deny comment="" disabled=no
add url="garden.ngadcenter.net" action=deny comment="" disabled=no
add url="gay50.com" action=deny comment="" disabled=no
add url="generalsmeltingofcanada.com" action=deny comment="" disabled=no
add url="geoads.osdn.com" action=deny comment="" disabled=no
add url="germany.rub.to" action=deny comment="" disabled=no
add url="geteens.com" action=deny comment="" disabled=no
add url="getpicshere.com" action=deny comment="" disabled=no
add url="gimmezamore.com" action=deny comment="" disabled=no
add url="gimnasiaer.com" action=deny comment="" disabled=no
add url="girls4rent.net" action=deny comment="" disabled=no
add url="girls-p0rn-life.com" action=deny comment="" disabled=no
add url="glbdf.org" action=deny comment="" disabled=no
add url="global.msads.net" action=deny comment="" disabled=no
add url="global-finder.com" action=deny comment="" disabled=no
add url="globaltrack.com" action=deny comment="" disabled=no
add url="globaltrak.net" action=deny comment="" disabled=no
add url="globalwebsearch.com" action=deny comment="" disabled=no
add url="globe-finder.cc" action=deny comment="" disabled=no
add url="globe-finder.com" action=deny comment="" disabled=no
add url="globesearch.com" action=deny comment="" disabled=no
add url="gm.preferences.com" action=deny comment="" disabled=no
add url="gocybersearch.com" action=deny comment="" disabled=no
add url="golftennis.net" action=deny comment="" disabled=no
add url="good-mortgages.net" action=deny comment="" disabled=no
add url="good-mortgages-calculator.com" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="google123.web1000.com" action=deny comment="" disabled=no
add url="googlebar.jps.ru" action=deny comment="" disabled=no
add url="googlf.com" action=deny comment="" disabled=no
add url="gp.dejanews.com" action=deny comment="" disabled=no
add url="gradforum.org" action=deny comment="" disabled=no
add url="gratis-p0rn-a.com" action=deny comment="" disabled=no
add url="gratis-pornopics.com" action=deny comment="" disabled=no
add url="greg-search.com" action=deny comment="" disabled=no
add url="gtawarehouse.com" action=deny comment="" disabled=no
add url="gueb.com" action=deny comment="" disabled=no
add url="guzzycats.com" action=deny comment="" disabled=no
add url="gzphoenix.com" action=deny comment="" disabled=no
add url="H24413.tfil.com" action=deny comment="" disabled=no
add url="hallnetaccolade.com" action=deny comment="" disabled=no
add url="hand-book.com" action=deny comment="" disabled=no
add url="happyanal.com" action=deny comment="" disabled=no
add url="hardbodytgp.com" action=deny comment="" disabled=no
add url="hardcoreover.com" action=deny comment="" disabled=no
add url="hard-gals.com" action=deny comment="" disabled=no
add url="hardloved.com" action=deny comment="" disabled=no
add url="hardwareseek.net" action=deny comment="" disabled=no
add url="harukaigawa.com" action=deny comment="" disabled=no
add url="hccsolanonapa.org" action=deny comment="" disabled=no
add url="health-protein.com" action=deny comment="" disabled=no
add url="hentai4u.net" action=deny comment="" disabled=no
add url="here4search.com" action=deny comment="" disabled=no
add url="heyrichy.com" action=deny comment="" disabled=no
add url="hg1.hitbox.com" action=deny comment="" disabled=no
add url="hi.studioaperto.net" action=deny comment="" disabled=no
add url="hiddenguides.com" action=deny comment="" disabled=no
add url="hi-search.com" action=deny comment="" disabled=no
add url="hitlistlyrics.com" action=deny comment="" disabled=no
add url="holidayautostr.com" action=deny comment="" disabled=no
add url="holland.hyperbanner.net" action=deny comment="" disabled=no
add url="homemortage.ws" action=deny comment="" disabled=no
add url="hostssp.com" action=deny comment="" disabled=no
add url="hotbar.com" action=deny comment="" disabled=no
add url="hotbookmark.com" action=deny comment="" disabled=no
add url="hot-cartoon-#.anime.american-teens.net" action=deny comment="" disabled=no
add url="hotels-list.net" action=deny comment="" disabled=no
add url="hotelxxxcams.com" action=deny comment="" disabled=no
add url="hotfreebies.com" action=deny comment="" disabled=no
add url="hotlolitas.underagehost.com" action=deny comment="" disabled=no
add url="hotpopup.com" action=deny comment="" disabled=no
add url="hotsearchbox.com" action=deny comment="" disabled=no
add url="#-series.com" action=deny comment="" disabled=no
add url="hotstartpage.com" action=deny comment="" disabled=no
add url="#.biz" action=deny comment="" disabled=no
add url="hugeporn4u.net" action=deny comment="" disabled=no
add url="hunacsa.com" action=deny comment="" disabled=no
add url="hupacasath.com" action=deny comment="" disabled=no
add url="hurricane.adlink.de" action=deny comment="" disabled=no
add url="hzsx.com" action=deny comment="" disabled=no
add url="i.timeinc.net" action=deny comment="" disabled=no
add url="icansearch.net" action=deny comment="" disabled=no
add url="icover.realmedia.com" action=deny comment="" disabled=no
add url="idgsearch.com" action=deny comment="" disabled=no
add url="ie.marketdart.com" action=deny comment="" disabled=no
add url="ieee-images.adbureau.net" action=deny comment="" disabled=no
add url="ie-search.com" action=deny comment="" disabled=no
add url="i-lookup.com" action=deny comment="" disabled=no
add url="im.800.com" action=deny comment="" disabled=no
add url="image.click2net.com" action=deny comment="" disabled=no
add url="image.eimg.com" action=deny comment="" disabled=no
add url="image.imgfarm.com" action=deny comment="" disabled=no
add url="images.ads.fairfax.com.au" action=deny comment="" disabled=no
add url="images.bizrate.com" action=deny comment="" disabled=no
add url="images.cybereps.com" action=deny comment="" disabled=no
add url="images.fastclick.net" action=deny comment="" disabled=no
add url="images.newsx.cc" action=deny comment="" disabled=no
add url="images.scripps.com" action=deny comment="" disabled=no
add url="images.trafficmp.com" action=deny comment="" disabled=no
add url="images.webads.nl" action=deny comment="" disabled=no
add url="images2.nytimes.com" action=deny comment="" disabled=no
add url="imageserv.adtech.de" action=deny comment="" disabled=no
add url="img.cmpnet.com" action=deny comment="" disabled=no
add url="incest-host.com" action=deny comment="" disabled=no
add url="incestporngate.com" action=deny comment="" disabled=no
add url="infodigger.net" action=deny comment="" disabled=no
add url="infoglobus.com" action=deny comment="" disabled=no
add url="information.gopher.com" action=deny comment="" disabled=no
add url="infospace.com/blsrch.dp.toolbar" action=deny comment="" disabled=no
add url="inherhole.com" action=deny comment="" disabled=no
add url="insertthiscock.com" action=deny comment="" disabled=no
add url="insuranceall.net" action=deny comment="" disabled=no
add url="insurance-flood.net" action=deny comment="" disabled=no
add url="internetsearch.ru" action=deny comment="" disabled=no
add url="ionichost.com" action=deny comment="" disabled=no
add url="ionomist.com" action=deny comment="" disabled=no
add url="#.net" action=deny comment="" disabled=no
add url="ironcarteam.com" action=deny comment="" disabled=no
add url="is-best.com" action=deny comment="" disabled=no
add url="istarthere.com" action=deny comment="" disabled=no
add url="itsanal.com" action=deny comment="" disabled=no
add url="itseasy.us" action=deny comment="" disabled=no
add url="iv.doubleclick.net" action=deny comment="" disabled=no
add url="iweb-commerce.com" action=deny comment="" disabled=no
add url="iwebland.com" action=deny comment="" disabled=no
add url="iwon.com" action=deny comment="" disabled=no
add url="java.yahoo.com" action=deny comment="" disabled=no
add url="jeannineoldfield.com" action=deny comment="" disabled=no
add url="jethomepage.com" action=deny comment="" disabled=no
add url="jetseeker.com" action=deny comment="" disabled=no
add url="jmhgallery.org" action=deny comment="" disabled=no
add url="joannelatham.com" action=deny comment="" disabled=no
add url="jobkeys.ngadcenter.net" action=deny comment="" disabled=no
add url="js1.hitbox.com" action=deny comment="" disabled=no
add url="judin.ru" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="k5ads.osdn.com" action=deny comment="" disabled=no
add url="kabex.com" action=deny comment="" disabled=no
add url="kansas.valueclick.com" action=deny comment="" disabled=no
add url="kaplanindex.com" action=deny comment="" disabled=no
add url="karleyt.narod.ru" action=deny comment="" disabled=no
add url="kathisomers.com" action=deny comment="" disabled=no
add url="kazaa-lite.ws" action=deny comment="" disabled=no
add url="keithgreenpro.com" action=deny comment="" disabled=no
add url="kenmccaul.com" action=deny comment="" disabled=no
add url="killerpornstars.com" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="kimhines.com" action=deny comment="" disabled=no
add url="kinoru.com" action=deny comment="" disabled=no
add url="kliksearch.com" action=deny comment="" disabled=no
add url="kr-adimage.lycos.co.kr" action=deny comment="" disabled=no
add url="krankin.com" action=deny comment="" disabled=no
add url="krd.realcities.com" action=deny comment="" disabled=no
add url="ksdspups.org" action=deny comment="" disabled=no
add url="landrape.com" action=deny comment="" disabled=no
add url="lauraroebuck.com" action=deny comment="" disabled=no
add url="leader.linkexchange.com" action=deny comment="" disabled=no
add url="leannalovelace.com" action=deny comment="" disabled=no
add url="lesobank.ru" action=deny comment="" disabled=no
add url="libertyonlinehosting.com" action=deny comment="" disabled=no
add url="lingerie-mania.com" action=deny comment="" disabled=no
add url="linksummary.com" action=deny comment="" disabled=no
add url="liquidad.narrowcastmedia.com" action=deny comment="" disabled=no
add url="lisamatthew.com" action=deny comment="" disabled=no
add url="live.#-explorer.com" action=deny comment="" disabled=no
add url="livegambling.com" action=deny comment="" disabled=no
add url="liveholio.com" action=deny comment="" disabled=no
add url="livenewspaper.com" action=deny comment="" disabled=no
add url="ln.doubleclick.net" action=deny comment="" disabled=no
add url="loading-lolita.com" action=deny comment="" disabled=no
add url="lolita4all1.xrensmagpost.com" action=deny comment="" disabled=no
add url="lollitop.com" action=deny comment="" disabled=no
add url="louiseleeds.com" action=deny comment="" disabled=no
add url="loveadot.com" action=deny comment="" disabled=no
add url="love-host.com" action=deny comment="" disabled=no
add url="lovelas.com" action=deny comment="" disabled=no
add url="lovelysearch.com" action=deny comment="" disabled=no
add url="love-pix.com" action=deny comment="" disabled=no
add url="low-taxes.com" action=deny comment="" disabled=no
add url="luckysearch.net" action=deny comment="" disabled=no
add url="lunitaweb.net" action=deny comment="" disabled=no
add url="lustful-p0rn0.com" action=deny comment="" disabled=no
add url="m.doubleclick.net" action=deny comment="" disabled=no
add url="m.tribalfusion.com" action=deny comment="" disabled=no
add url="m2.doubleclick.net" action=deny comment="" disabled=no
add url="macaddictads.snv.futurenet.com" action=deny comment="" disabled=no
add url="mackinnonsbrook.org" action=deny comment="" disabled=no
add url="madfinder.com" action=deny comment="" disabled=no
add url="madisonmoons.com" action=deny comment="" disabled=no
add url="madisonoilco.com" action=deny comment="" disabled=no
add url="madonalive.com" action=deny comment="" disabled=no
add url="mafiapics.com" action=deny comment="" disabled=no
add url="mainstreamdollars.com" action=deny comment="" disabled=no
add url="majuozawa.com" action=deny comment="" disabled=no
add url="makin-do.com" action=deny comment="" disabled=no
add url="male4free.com" action=deny comment="" disabled=no
add url="map-quest.org" action=deny comment="" disabled=no
add url="marilynchamber.com" action=deny comment="" disabled=no
add url="marketing.nyi.net" action=deny comment="" disabled=no
add url="martfinder.com" action=deny comment="" disabled=no
add url="massearch.com" action=deny comment="" disabled=no
add url="masterbar.com" action=deny comment="" disabled=no
add url="matetrava.com" action=deny comment="" disabled=no
add url="mature50.com" action=deny comment="" disabled=no
add url="matureporngate.com" action=deny comment="" disabled=no
add url="maxdzines.com" action=deny comment="" disabled=no
add url="maximumpcads.imaginemedia.com" action=deny comment="" disabled=no
add url="mayancasino.com" action=deny comment="" disabled=no
add url="mcgeeforlabor.com" action=deny comment="" disabled=no
add url="mds.centrport.net" action=deny comment="" disabled=no
add url="mdstunisie.org" action=deny comment="" disabled=no
add url="media.fastclick.net" action=deny comment="" disabled=no
add url="media.popuptraffic.com" action=deny comment="" disabled=no
add url="media.preferences.com" action=deny comment="" disabled=no
add url="media13.fastclick.net" action=deny comment="" disabled=no
add url="media15.fastclick.net" action=deny comment="" disabled=no
add url="media17.fastclick.net" action=deny comment="" disabled=no
add url="media19.fastclick.net" action=deny comment="" disabled=no
add url="mediamgr.ugo.com" action=deny comment="" disabled=no
add url="medicare-insurance.net" action=deny comment="" disabled=no
add url="medicare-supplemental.com" action=deny comment="" disabled=no
add url="mega-dating-tips.com" action=deny comment="" disabled=no
add url="megaseek.net" action=deny comment="" disabled=no
add url="megumikanzaki.com" action=deny comment="" disabled=no
add url="mercury.rmuk.co.uk" action=deny comment="" disabled=no
add url="meshalynn.com" action=deny comment="" disabled=no
add url="meta-adult.com" action=deny comment="" disabled=no
add url="meta-casino.com" action=deny comment="" disabled=no
add url="metafora.ru" action=deny comment="" disabled=no
add url="meta-mobile.com" action=deny comment="" disabled=no
add url="metapoisk.ru" action=deny comment="" disabled=no
add url="meta-p0rn.com" action=deny comment="" disabled=no
add url="michiyonakajima.com" action=deny comment="" disabled=no
add url="miconsultamedica.com" action=deny comment="" disabled=no
add url="mikasakamoto.com" action=deny comment="" disabled=no
add url="mikoni.com" action=deny comment="" disabled=no
add url="militarygods.porn4porn.net" action=deny comment="" disabled=no
add url="millennialpeople.org" action=deny comment="" disabled=no
add url="miosearch.com" action=deny comment="" disabled=no
add url="mipham.org" action=deny comment="" disabled=no
add url="missingcommand.com" action=deny comment="" disabled=no
add url="mixsearch.com" action=deny comment="" disabled=no
add url="mjxads.internet.com" action=deny comment="" disabled=no
add url="mojofarm.mediaplex.com" action=deny comment="" disabled=no
add url="mojofarm.sjc.mediaplex.com" action=deny comment="" disabled=no
add url="mommykiss.com" action=deny comment="" disabled=no
add url="moneyhunters.com" action=deny comment="" disabled=no
add url="montgomeryhospitalanesthesia.com" action=deny comment="" disabled=no
add url="morflot.com" action=deny comment="" disabled=no
add url="mortgage-debt.net" action=deny comment="" disabled=no
add url="mortismaximus.com" action=deny comment="" disabled=no
add url="moscowwhores.com" action=deny comment="" disabled=no
add url="a.com" action=deny comment="" disabled=no
add url="mp3-pix.com" action=deny comment="" disabled=no
add url="mrtg.jps.ru" action=deny comment="" disabled=no
add url="msn-info.net" action=deny comment="" disabled=no
add url="mt37.mtree.com" action=deny comment="" disabled=no
add url="multipussy.com" action=deny comment="" disabled=no
add url="mundopolar.com" action=deny comment="" disabled=no
add url="munky.com" action=deny comment="" disabled=no
add url="mustv.com" action=deny comment="" disabled=no
add url="myexexex.com" action=deny comment="" disabled=no
add url="my-finder.com" action=deny comment="" disabled=no
add url="mywebsearch.net" action=deny comment="" disabled=no
add url="nativehardcore.com" action=deny comment="" disabled=no
add url="naturalspy.com" action=deny comment="" disabled=no
add url="nbasportsbook.net" action=deny comment="" disabled=no
add url="nbc.adbureau.net" action=deny comment="" disabled=no
add url="needf*cknow.com" action=deny comment="" disabled=no
add url="neighborhood.standard.net" action=deny comment="" disabled=no
add url="nellyslyrics.com" action=deny comment="" disabled=no
add url="nepgyan.com" action=deny comment="" disabled=no
add url="nesrecords.com" action=deny comment="" disabled=no
add url="netcomm.spinbox.net" action=deny comment="" disabled=no
add url="netshastra.net" action=deny comment="" disabled=no
add url="netshelter.adtrix.com" action=deny comment="" disabled=no
add url="nettime.ru" action=deny comment="" disabled=no
add url="nettracker.jps.ru" action=deny comment="" disabled=no
add url="netyellowpages.info" action=deny comment="" disabled=no
add url="newads.cmpnet.com" action=deny comment="" disabled=no
add url="newcategories.com" action=deny comment="" disabled=no
add url="newcracks.com" action=deny comment="" disabled=no
add url="newcracks.net" action=deny comment="" disabled=no
add url="new-incest.com" action=deny comment="" disabled=no
add url="newlife-lajolla.com" action=deny comment="" disabled=no
add url="new-search.net" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="newtonknows.com" action=deny comment="" disabled=no
add url="newtonsracks.com" action=deny comment="" disabled=no
add url="newtopsites.com" action=deny comment="" disabled=no
add url="newxpics.com" action=deny comment="" disabled=no
add url="ng3.ads.warnerbros.com" action=deny comment="" disabled=no
add url="ngads.smartage.com" action=deny comment="" disabled=no
add url="nhlsportsbook.net" action=deny comment="" disabled=no
add url="niagaracapital.com" action=deny comment="" disabled=no
add url="niche-tv.com" action=deny comment="" disabled=no
add url="nmrba.com" action=deny comment="" disabled=no
add url="noblindlinks.com" action=deny comment="" disabled=no
add url="nocalories.net" action=deny comment="" disabled=no
add url="nocensor.com" action=deny comment="" disabled=no
add url="nrsite.com" action=deny comment="" disabled=no
add url="nsads.hotwired.com" action=deny comment="" disabled=no
add url="nsbabes.com" action=deny comment="" disabled=no
add url="ntbanner.digitalriver.com" action=deny comment="" disabled=no
add url="nuclearwitness.org" action=deny comment="" disabled=no
add url="nursemania.com" action=deny comment="" disabled=no
add url="nvntour.com" action=deny comment="" disabled=no
add url="nvphall.org" action=deny comment="" disabled=no
add url="oas.dispatch.com" action=deny comment="" disabled=no
add url="oas.lee.net" action=deny comment="" disabled=no
add url="oas.mmd.ch" action=deny comment="" disabled=no
add url="oas.uniontrib.com" action=deny comment="" disabled=no
add url="oas.villagevoice.com" action=deny comment="" disabled=no
add url="oasads.whitepages.com" action=deny comment="" disabled=no
add url="oborot.com" action=deny comment="" disabled=no
add url="ocalalivestockmarket.com" action=deny comment="" disabled=no
add url="ocsff.com" action=deny comment="" disabled=no
add url="oeatlanta.com" action=deny comment="" disabled=no
add url="ogilvy.ngadcenter.net" action=deny comment="" disabled=no
add url="oharrowsearch.com" action=deny comment="" disabled=no
add url="okmmm.com" action=deny comment="" disabled=no
add url="ok-search.com" action=deny comment="" disabled=no
add url="okulta.com" action=deny comment="" disabled=no
add url="omegabrains.net" action=deny comment="" disabled=no
add url="omega-search.com" action=deny comment="" disabled=no
add url="online-casino-1.net" action=deny comment="" disabled=no
add url="online-casino-bonus.info" action=deny comment="" disabled=no
add url="online-casinos-x.com" action=deny comment="" disabled=no
add url="onlineclick.net" action=deny comment="" disabled=no
add url="onlineserverz.com" action=deny comment="" disabled=no
add url="onlinetradings.net" action=deny comment="" disabled=no
add url="online-winning.net" action=deny comment="" disabled=no
add url="onlycunt.com" action=deny comment="" disabled=no
add url="onlyinsured.com" action=deny comment="" disabled=no
add url="#.ws" action=deny comment="" disabled=no
add url="only-virgins.com" action=deny comment="" disabled=no
add url="operanabuco.com" action=deny comment="" disabled=no
add url="#.com" action=deny comment="" disabled=no
add url="orbitexplorer.com" action=deny comment="" disabled=no
add url="oregoncharters.org" action=deny comment="" disabled=no
add url="ormandcompany.com" action=deny comment="" disabled=no
add url="otrlives.com" action=deny comment="" disabled=no
add url="out.true-counter.com" action=deny comment="" disabled=no
add url="oz.valueclick.com" action=deny comment="" disabled=no
add url="ozawamadoka.com" action=deny comment="" disabled=no
add url="paigesummer.com