حماية لحظر البحث عن بورتات النظام الحماية مخصصة لخروج الشبكة port scan firewall mikrotik

/ip firewall address-list
add address=172.16.0.0/12 comment=RFC6890 list=not_in_internet
add address=192.168.0.0/16 comment=RFC6890 list=not_in_internet
add address=10.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=169.254.0.0/16 comment=RFC6890 list=not_in_internet
add address=127.0.0.0/8 comment=RFC6890 list=not_in_internet
add address=224.0.0.0/4 comment=Multicast list=not_in_internet
add address=198.18.0.0/15 comment=RFC6890 list=not_in_internet
add address=192.0.0.0/24 comment=RFC6890 list=not_in_internet
add address=192.0.2.0/24 comment=RFC6890 list=not_in_internet
add address=198.51.100.0/24 comment=RFC6890 list=not_in_internet
add address=203.0.113.0/24 comment=RFC6890 list=not_in_internet
add address=100.64.0.0/10 comment=RFC6890 list=not_in_internet
add address=240.0.0.0/4 comment=RFC6890 list=not_in_internet
add address=192.88.99.0/24 comment="6to4 relay Anycast [RFC 3068]" list=not_in_internet


/ip firewall raw
add action=drop chain=prerouting dst-address-list=not_in_internet in-interface=all-vlan protocol=tcp psd=21,3s,3,1 src-address-list=not_in_internet comment=salman-dahmash
add action=drop chain=prerouting dst-address-list=not_in_internet in-interface=all-vlan protocol=udp psd=21,3s,3,1 src-address-list=not_in_internet comment=salman-dahmash
add action=drop chain=prerouting dst-address-list=not_in_internet in-interface=out protocol=tcp psd=21,3s,3,1 src-address-list=not_in_internet comment=salman-dahmash
add action=drop chain=prerouting dst-address-list=not_in_internet in-interface=out protocol=udp psd=21,3s,3,1 src-address-list=not_in_internet comment=salman-dahmash