altinea
/
Mikrotik
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Browse Source

mikrotik.rsc V1

master
Sébastien Faton 12 months ago
parent
2735b8aee7
commit
649a128984
1 changed files with 131 additions and 0 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 131
      mikrotik.rsc

131
mikrotik.rsc
View File

@ -0,0 +1,131 @@
/interface bridge
add name=bridge-lan
/interface list
add name=WAN
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/queue simple
add max-limit=1G/1G name=bridge queue=pcq-upload-default/pcq-download-default \
target=bridge-lan
/snmp community
set [ find default=yes ] addresses=185.123.84.25/32,10.17.24.18/32 name=\
altinea
/interface bridge port
add bridge=bridge-lan interface=ether2
add bridge=bridge-lan interface=ether3
add bridge=bridge-lan interface=ether4
/interface list member
add interface=ether1 list=WAN
/ip dhcp-client
add comment=defconf interface=ether1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall address-list
add address=185.123.84.200 comment=vpn.altinea.fr list=altinea.safe
add address=185.123.84.50 comment=oxidized.altinea.fr list=altinea.safe
add address=185.123.84.25 comment=icinga2.altinea.fr list=altinea.safe
add address=10.17.24.18 comment=icinga2.altinea.fr list=altinea.safe
add address=158.69.205.82 comment=ext.nagios.altinea.fr list=altinea.safe
add address=10.17.24.0/24 comment=adminvpn.altinea.fr list=altinea.safe
/ip firewall filter
add action=accept chain=forward connection-state=\
established,related,untracked
add action=accept chain=input dst-port=8291 protocol=tcp src-address-list=\
altinea.safe
add action=accept chain=input dst-port=161 protocol=udp src-address-list=\
altinea.safe
add action=accept chain=input dst-port=22 protocol=tcp src-address-list=\
altinea.safe
add action=accept chain=input dst-port=22 in-interface=bridge-lan protocol=\
tcp
add action=accept chain=input dst-port=8291 in-interface=bridge-lan protocol=\
tcp
add action=accept chain=input protocol=icmp
add action=drop chain=input dst-port=53 in-interface-list=WAN protocol=tcp
add action=drop chain=input dst-port=53 in-interface-list=WAN protocol=udp
add action=drop chain=input connection-state="" dst-port=22 protocol=tcp
add action=drop chain=input dst-port=161 protocol=udp
add action=drop chain=input connection-state="" dst-port=8291 protocol=tcp
add action=drop chain=input connection-state=invalid
/ip firewall mangle
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
protocol=tcp tcp-flags=syn
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip firewall service-port
set sip disabled=yes
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/snmp
set contact=noc@altinea.fr enabled=yes
/system clock
set time-zone-name=Europe/Paris
/system note
set show-at-login=no
/tool romon
set enabled=yes
/
:delay 5s;
:global oxidizedcpepub "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDKVHiQwYh8rdWgwAqs5+aNBp6f1gqbUfh9BO+5XG7QigMEYmmawPy9LHwcSADKLuIwaFdfalMYrx90JpNzrDEmvBCep3YlyS1YLRZlLYntSS3G8q70XFPFf84HD9Uh9MAD6qHkZArvhDZ6t0fP2HhqEN8Ud2Dx1qAvn8cdDgjO5zFGNaevQUpVXEcc2lSUkJkzw6F/nH+xJQEd7/a62f8XdcYnzOafLkZwAWR5xCpCbhCIXQ0KEo8+Z5Edc7AvmSFRdc8EC1Upz/LVsR193vNnvm9yTyu5UzhCVVfhNNzNYMX+4NF0MzvG0QlsetGinqzWW0jR8YW5Kcltef2PtaF152P5Pu+mpg3mvxCE9glxjmwegoXhQu6gcxIdUpmcXar2nS9pxnL9LLoZ5kRyXHPpktRSqte2HD8dcgVBqS7AgY9J1hduko9DWkFWiAIM0C0d6702ZXYwFFmnfJcxAFeSbZbvGyjfv0K87/Y2tZNjghZifpzi8+LRgKseoAhE4+8= oxidized-cpe@altinea.fr";
/file print file=oxidized-cpe.txt;
:delay 10;
/file set oxidized-cpe.txt content=$oxidizedcpepub;
:delay 10;
/user add name=oxidized group=read password=azELMAkGA1UEBhMCQ04xETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQKDAh0ZWFt;
:delay 10s;
/user ssh-keys import user=oxidized public-key-file=oxidized-cpe.txt
:delay 10;
:global supportpub "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDo7t//wpsOExn87AoUItPWZ/AF1e2UcKTaO6CVtpEh3b+Z4/vZ+LaFaczssGcPLcUpZEGB/UNkIPITAK2gXjT+2GLzQQ9DfLu9fNeE+AaWo7VZFM1Aviua0Zo2prDTCgXJ+z8kRuzvBfxuOKPNsLwxg/y3CYC+YSUb+00ZAi0I51x1VRfCIfoZqvMbEH1CIj7MRRuKu1B7Ue80vvC7XpgIZGvQepxc2j1vDSKHozM+/l3QdZBEbqdkUnO90i8XSRBpLRVadsgotg5uggKYzMQfvnuTYodmQKM3nk057wj7fmGIFNJxhH20bOTXUG8Yf80OLDsOJNqxQQgsrGVAVYL3wuP1UfDCLNXfOz81equ+S5JQuAMDRsnux+D06D/vmdEaqALMRtH2iSmlumYpRYxzYNKsrLa6Wi2oDmedFj7MpTJXRaA5a3AUNoj7S6BmG0jsTCAKOp2/i91O9zYZoedGuusUkurfdnP6qMIxpeX1zaWkWRnl1f6DhshKgOsI/t/6rPP+j0Jar/WMKLS/fmUI6OTbteQzePiQiKvVWJv8QDs4o0Krl9/LazmWhF4exElfbujjBRTk5Xf6x+0qgnAOGy2WKU9tiYIspK/I6T5O4H3L4B1S2nJppl28hHf53PuEFH8B1ezYJrY/8GPskVh35m1uiQJZ7GR7ZQOas8KWUw== support@altinea.fr";
:delay 10s;
/file print file=support-pub.txt;
:delay 10;
/file set support-pub.txt content=$supportpub;
/user set admin password=BQAwazELMAkGA1UEBhMCQ04xETAPBgNVBAgMCFNoYW5naGFpMREwDwYDVQQKDAh0;
:delay 10s;
/user ssh-keys import user=admin public-key-file=support-pub.txt;
:delay 10s;
/system script
add name=imperial owner=admin policy=read source=":beep frequency=500 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=500 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=500 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=400 length=500ms;\
\n:delay 400ms;\
\n:beep frequency=600 length=200ms;\
\n:delay 100ms;\
\n:beep frequency=500 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=400 length=500ms;\
\n:delay 400ms;\
\n:beep frequency=600 length=200ms;\
\n:delay 100ms;\
\n:beep frequency=500 length=500ms;\
\n:delay 1000ms;\
\n:beep frequency=750 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=750 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=750 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=810 length=500ms;\
\n:delay 400ms;\
\n:beep frequency=600 length=200ms;\
\n:delay 100ms;\
\n:beep frequency=470 length=500ms;\
\n:delay 500ms;\
\n:beep frequency=400 length=500ms;\
\n:delay 400ms;\
\n:beep frequency=600 length=200ms;\
\n:delay 100ms;\
\n:beep frequency=500 length=500ms;\
\n:delay 1000ms;"
run imperial
/
Write Preview
Loading…
Cancel
Save