We'll not spam mate! We promise.
// Create an XBee object at the top of your sketch XBee xbee = XBee(); // Tell XBee to start Serial xbee.begin(9600); // Create an array for holding the data you want to send. uint8_t payload[] = { 'H', 'i' }; // Specify the address of the remote XBee (this is the SH + SL) XBeeAddress64 addr64 = XBeeAddress64(0x0013a200, 0x403e0f30); // Create a TX Request ZBTxRequest zbTx = ZBTxRequest(addr64, payload, sizeof(payload)); // Send your request xbee.send(zbTx);See the examples folder for the full source. There are more examples in the download.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
| /ip addressadd address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Localadd address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=WAN1add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=WAN2/ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=221.132.112.8,8.8.8.8/ip firewall mangleadd chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_connadd chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_connadd chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Localadd chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Localadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/0
action=mark-connection new-connection-mark=WAN1_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/1
action=mark-connection new-connection-mark=WAN2_conn passthrough=yesadd chain=prerouting connection-mark=WAN1_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN1add chain=prerouting connection-mark=WAN2_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN2/ip routeadd dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 check-gateway=pingadd dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=to_WAN2 check-gateway=pingadd dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=pingadd dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=2 check-gateway=ping/ip firewall natadd chain=srcnat out-interface=WAN1 action=masqueradeadd chain=srcnat out-interface=WAN2 action=masquerade |
1
2
3
| add
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/0
action=mark-connection new-connection-mark=WAN1_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/1
action=mark-connection new-connection-mark=WAN2_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/2
action=mark-connection new-connection-mark=WAN2_conn passthrough=yes |
1
| /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth |
1
2
| /interface pppoe-server server add
authentication=pap default-profile=default disabled=no interface=ether1
keepalive-timeout=10 max-mru=1480 max-mtu=1480 max-sessions=1
mrru=disabled one-session-per-host=yes service-name=aacable |
1
| /ip pool add name=pppoe-users-pool ranges=172.16.0.1-172.16.0.254 |
1
| /ppp
profile add change-tcp-mss=default dns-server=10.0.0.1
local-address=10.0.0.1 name=pppoe-profile only-one=default
remote-address=pppoe-users-pool use-compression=default
use-encryption=default use-vj-compression=default |
1
| /ip firewall nat add action=masquerade chain=srcnat disabled=no src-address=172.16.0.1-172.16.0.255 |
1
| /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=221.132.112.8 |
1
| /ppp
secret add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0
name=zaib password=1234 profile=pppoe-profile routes="" service=pppoe |
1
2
3
| /tool user-manager customer set admin password=PASSWORD**OR**/tool user-manager customer print |
1
2
3
4
5
| /ppp aaa set accounting=yes interim-update=0s use-radius=yes/radius
add accounting-backup=no accounting-port=1813 address=10.0.0.1
authentication-port=1812 called-id="" disabled=no domain="" realm=""
secret=1234 service=ppp,hotspot timeout=300ms/radius incoming set accept=yes port=3799 |
1
2
3
4
5
6
7
| /ip firewall address-list add list=management-servers address=10.10.0.1/24/ip firewall filter add chain=input src-address-list=management-servers protocol=tcp dst-port=21,22,23,80,443,8291 action=acceptadd chain=input protocol=tcp dst-port=21,22,23,80,443,8291 action=drop |
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
| ############################################################################## Remove HASH # sign if you want to apply the required rule ##### Syed Jahanzaib / aacable@hotmail.com / http://aacabel.wordpress.com ###########################################################################/ip firewall filteradd chain=input connection-state=established comment="Accept established connections"add chain=input connection-state=related comment="Accept related connections"add chain=input connection-state=invalid action=drop comment="Drop invalid connections"add chain=input protocol=udp action=accept comment="UDP" disabled=noadd chain=forward connection-state=invalid action=drop comment="drop invalid connections"#### ALLOW VPN (PPTP) CONNECTIONS TO MIKROTIK VPN SERVER#add action=accept chain=input disabled=no dst-port=1723 protocol=tcp#add action=accept chain=input disabled=no protocol=gre#### TO BLOCK DNS ATTACK on WAN INTERFACE#/ip firewall filter#add chain=input action=drop dst-port=53 protocol=udp in-interface=ether1 # WAN INTERFACE#add chain=input action=drop dst-port=53 protocol=tcp in-interface=ether1 # WAN INTERFACE#### TO BLOCK PROXY ACCESS PORT 8080 / ATTACK on WAN INTERFACE#add chain=input action=drop dst-port=8080 protocol=tcp in-interface=ether1 # WAN INTERFACE#### TO BLOCK ICMP TRAFFIC EXCEPT FROM THE Management PC IP# Blocking ICMP Traffic, saves you from many headaches# add action=drop chain=input comment="DROP PING REPLY" disabled=no protocol=icmp src-address=!10.10.0.4#### TO BLOCK TRACEROUTE TRAFFIC#/ip firewall add action=drop chain=forward comment="Drop Traceroute" disabled=no \# icmp-options=11:0 protocol=icmp# add action=drop chain=forward comment="" disabled=no icmp-options=3:3 \# protocol=icmp# add action=drop chain=input comment="Disable ICMP ping" disabled=no protocol=\# icmp#### TO BLOCK COMMON VIRUS PORTSadd chain=virus protocol=tcp dst-port=135-139 action=drop comment="Drop Blaster Worm"add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm"add chain=virus protocol=tcp dst-port=445 action=drop comment="Drop Blaster Worm"add chain=virus protocol=udp dst-port=445 action=drop comment="Drop Blaster Worm"add chain=virus protocol=tcp dst-port=593 action=drop comment="________"add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment="________"add chain=virus protocol=tcp dst-port=1080 action=drop comment="Drop MyDoom"add chain=virus protocol=tcp dst-port=1214 action=drop comment="________"add chain=virus protocol=tcp dst-port=1363 action=drop comment="ndm requester"add chain=virus protocol=tcp dst-port=1364 action=drop comment="ndm server"add chain=virus protocol=tcp dst-port=1368 action=drop comment="screen cast"add chain=virus protocol=tcp dst-port=1373 action=drop comment="hromgrafx"add chain=virus protocol=tcp dst-port=1377 action=drop comment="cichlid"add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment="Worm"add chain=virus protocol=tcp dst-port=2745 action=drop comment="Bagle Virus"add chain=virus protocol=tcp dst-port=2283 action=drop comment="Drop Dumaru.Y"add chain=virus protocol=tcp dst-port=2535 action=drop comment="Drop Beagle"add chain=virus protocol=tcp dst-port=2745 action=drop comment="Drop Beagle.C-K"add chain=virus protocol=tcp dst-port=3127-3128 action=drop comment="Drop MyDoom"add chain=virus protocol=tcp dst-port=3410 action=drop comment="Drop Backdoor OptixPro"add chain=virus protocol=tcp dst-port=4444 action=drop comment="Worm"add chain=virus protocol=udp dst-port=4444 action=drop comment="Worm"add chain=virus protocol=tcp dst-port=5554 action=drop comment="Drop Sasser"add chain=virus protocol=tcp dst-port=8866 action=drop comment="Drop Beagle.B"add chain=virus protocol=tcp dst-port=9898 action=drop comment="Drop Dabber.A-B"add chain=virus protocol=tcp dst-port=10000 action=drop comment="Drop Dumaru.Y"add chain=virus protocol=tcp dst-port=10080 action=drop comment="Drop MyDoom.B"add chain=virus protocol=tcp dst-port=12345 action=drop comment="Drop NetBus"add chain=virus protocol=tcp dst-port=17300 action=drop comment="Drop Kuang2"add chain=virus protocol=tcp dst-port=27374 action=drop comment="Drop SubSeven"add chain=virus protocol=tcp dst-port=65506 action=drop comment="Drop PhatBot, Agobot, Gaobot"add chain=forward action=jump jump-target=virus comment="jump to the virus chain"#Drop port scannersadd
chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list
address-list="port scanners" address-list-timeout=2w comment="Port
scanners to list " disabled=noadd
chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="NMAP FIN Stealth scan"add
chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="SYN/FIN scan"add
chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="SYN/RST scan"add
chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="FIN/PSH/URG scan"add
chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="ALL/ALL scan"add
chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list="port scanners"
address-list-timeout=2w comment="NMAP NULL scan"add chain=input src-address-list="port scanners" action=drop comment="dropping port scanners" disabled=no#Bruteforce login preventionadd chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop comment="drop ftp brute forcers"add chain=output action=accept protocol=tcp content="530 Login incorrect" dst-limit=1/1m,9,dst-address/1madd
chain=output action=add-dst-to-address-list protocol=tcp content="530
Login incorrect" address-list=ftp_blacklist address-list-timeout=3h#This will prevent a SSH brute forcer to be banned for 10 days after repetitive attempts.add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop comment="drop ssh brute forcers" disabled=noadd
chain=input protocol=tcp dst-port=22 connection-state=new
src-address-list=ssh_stage3 action=add-src-to-address-list
address-list=ssh_blacklist address-list-timeout=10d comment=""
disabled=noadd
chain=input protocol=tcp dst-port=22 connection-state=new
src-address-list=ssh_stage2 action=add-src-to-address-list
address-list=ssh_stage3 address-list-timeout=10m comment="" disabled=noadd
chain=input protocol=tcp dst-port=22 connection-state=new
src-address-list=ssh_stage1 action=add-src-to-address-list
address-list=ssh_stage2 address-list-timeout=10m comment="" disabled=noadd
chain=input protocol=tcp dst-port=22 connection-state=new
action=add-src-to-address-list address-list=ssh_stage1
address-list-timeout=1m comment="" disabled=no#If you want to block downstream access as well, you need to block the with the forward chain:add
chain=forward protocol=tcp dst-port=22 src-address-list=ssh_blacklist
action=drop comment="drop ssh brute downstream" disabled=no |
1
2
3
4
5
6
| /ip firewall mangleadd
action=add-src-to-address-list address-list=Worm-Infected-p445
address-list-timeout=1h chain=prerouting connection-state=new
disabled=no dst-port=445 limit=5,10 protocol=tcp/ip firewall filteradd action=drop chain=forward disabled=no dst-port=445 protocol=tcp src-address-list=Worm-Infected-p445add action=drop chain=forward disabled=no dst-port=445 protocol=tcp src-address-list=Worm-Infected-p445 |
1
2
3
4
5
6
7
8
9
| /tool mac-serveradd disabled=yes interface=all/tool mac-server pingset enabled=no/ip firewall filteradd action=drop chain=input comment="block mikrotik discovery" disabled=no dst-port=5678 protocol=udpadd action=drop chain=input comment="DROP ALL WINBOX REQUEST By MAC Address" disabled=no dst-port=20561 protocol=udpadd
action=drop chain=input comment="DROP ALL WINBOX REQUEST EXCEPT FROM MY
PC" disabled=no dst-port=8291 protocol=tcp src-address=!192.168.2.6 |
1
| /ip neighbor discovery set ether1 discover=no |
1
2
3
| /ip firewall filteradd action=accept chain=input disabled=no dst-port=1723 protocol=tcpadd action=accept chain=input disabled=no protocol=gre |
1
| W A i T |
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
| /ip address add address=172.16.0.1/16 broadcast=172.16.255.255 comment="" disabled=no interface=Local network=172.16.0.0 add address=192.168.1.2/24 broadcast=192.168.1.255 comment="" disabled=no interface=WAN1 network=192.168.1.0 add address=192.168.2.2/24 broadcast=192.168.2.255 comment="" disabled=no interface=WAN2 network=192.168.2.0 add address=192.168.3.2/24 broadcast=192.168.3.255 comment="" disabled=no interface=WAN3 network=192.168.3.0 add address=192.168.4.2/24 broadcast=192.168.4.255 comment="" disabled=no interface=WAN4 network=192.168.4.0/ip pool add name=dhcp_pool1 ranges=172.16.0.70-172.16.0.254 add name=pppoe-users-pool ranges=10.0.0.1-10.0.0.255/ip
dhcp-server add address-pool=dhcp_pool1 authoritative=after-2sec-delay
bootp-support=static disabled=no interface=Local lease-time=12h name="My
DHCP Server"/ip dhcp-server config set store-leases-disk=5m/ip dhcp-server network add address=172.16.0.0/16 comment="" dns-server=172.16.0.1,221.132.112.8/interface pppoe-server server add
authentication=pap default-profile=default disabled=no interface=Local
keepalive-timeout=10 max-mru=1480 max-mtu=1480 max-sessions=1
mrru=disabled one-session-per-host=yes service-name=aacable/ppp
profile add change-tcp-mss=default dns-server=172.16.0.1
local-address=172.16.0.1 name=pppoe-profile only-one=default
remote-address=pppoe-users-pool use-compression=default
use-encryption=default use-vj-compression=default/ppp
secret add caller-id=”" disabled=no limit-bytes-in=0 limit-bytes-out=0
name=zaib password=1234 profile=pppoe-profile routes=”" service=pppoe/ip
dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=10000KiB
max-udp-packet-size=512 servers=221.132.112.8,221.132.112.9/ip firewall mangle add action=mark-connection chain=input comment="" disabled=no in-interface=WAN1 new-connection-mark=WAN1_conn passthrough=yes add action=mark-connection chain=input comment="" disabled=no in-interface=WAN2 new-connection-mark=WAN2_conn passthrough=yes add action=mark-connection chain=input comment="" disabled=no in-interface=WAN3 new-connection-mark=WAN3_conn passthrough=yes add action=mark-connection chain=input comment="" disabled=no in-interface=WAN4 new-connection-mark=WAN4_conn passthrough=yesadd action=mark-routing chain=output comment="" connection-mark=WAN1_conn disabled=no new-routing-mark=to_WAN1 passthrough=yes add action=mark-routing chain=output comment="" connection-mark=WAN2_conn disabled=no new-routing-mark=to_WAN2 passthrough=yes add action=mark-routing chain=output comment="" connection-mark=WAN3_conn disabled=no new-routing-mark=to_WAN3 passthrough=yes add action=mark-routing chain=output comment="" connection-mark=WAN4_conn disabled=no new-routing-mark=to_WAN4 passthrough=yesadd action=accept chain=prerouting comment="" disabled=no dst-address=192.168.1.0/24 add action=accept chain=prerouting comment="" disabled=no dst-address=192.168.2.0/24 add action=accept chain=prerouting comment="" disabled=no dst-address=192.168.3.0/24 add action=accept chain=prerouting comment="" disabled=no dst-address=192.168.4.0/24add
action=mark-connection chain=prerouting comment="" disabled=no
dst-address-type=!local new-connection-mark=WAN1_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:4/0
src-address=10.0.0.1-10.0.0.255add
action=mark-connection chain=prerouting comment="" disabled=no
dst-address-type=!local new-connection-mark=WAN2_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:4/1
src-address=10.0.0.1-10.0.0.255add
action=mark-connection chain=prerouting comment="" disabled=no
dst-address-type=!local new-connection-mark=WAN3_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:4/2
src-address=10.0.0.1-10.0.0.255add
action=mark-connection chain=prerouting comment="" disabled=no
dst-address-type=!local new-connection-mark=WAN4_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:4/3
src-address=10.0.0.1-10.0.0.255add
action=mark-routing chain=prerouting comment=""
connection-mark=WAN1_conn disabled=no new-routing-mark=to_WAN1
passthrough=yes add
action=mark-routing chain=prerouting comment=""
connection-mark=WAN2_conn disabled=no new-routing-mark=to_WAN2
passthrough=yes add
action=mark-routing chain=prerouting comment=""
connection-mark=WAN3_conn disabled=no new-routing-mark=to_WAN3
passthrough=yes add
action=mark-routing chain=prerouting comment=""
connection-mark=WAN4_conn disabled=no new-routing-mark=to_WAN4
passthrough=yes/ip firewall nat add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN1 src-address=10.0.0.1-10.0.0.255 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN2 src-address=10.0.0.1-10.0.0.255 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN3 src-address=10.0.0.1-10.0.0.255 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN4 src-address=10.0.0.1-10.0.0.255/ip route add
check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 routing-mark=to_WAN1 scope=30 target-scope=10add
check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0
gateway=192.168.2.1 routing-mark=to_WAN2 scope=30 target-scope=10add
check-gateway=ping disabled=no distance=3 dst-address=0.0.0.0/0
gateway=192.168.3.1 routing-mark=to_WAN3 scope=30 target-scope=10add
check-gateway=ping disabled=no distance=4 dst-address=0.0.0.0/0
gateway=192.168.4.1 routing-mark=to_WAN4 scope=30 target-scope=10add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=30 target-scope=10add check-gateway=ping comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=30 target-scope=10add check-gateway=ping comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=192.168.3.1 scope=30 target-scope=10add check-gateway=ping comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=192.168.4.1 scope=30 target-scope=10 |
1
| /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth |
1
2
3
4
5
| add
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:4/0
action=mark-connection new-connection-mark=WAN1_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:4/1
action=mark-connection new-connection-mark=WAN2_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:4/2
action=mark-connection new-connection-mark=WAN3_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:4/3
action=mark-connection new-connection-mark=WAN4_conn passthrough=yesadd
chain=prerouting dst-address-type=!local in-interface=Local
per-connection-classifier=both-addresses-and-ports:4/4
action=mark-connection new-connection-mark=WAN4_conn passthrough=yes |
Copyright © 2013 Learn It. Free software seo friendly blogger templates
