Re: ???Access-Lists???

From: Rob Hopkins (rshopkins@xxxxxxxxxxxxx)
Date: Sat Apr 21 2001 - 15:45:16 GMT-3


   
here goes (16 lines) : tcp blocked, will block http traffic as well,
100 & 101 combined
104 & 105 combined

Thanks,
Rob Hopkins

access-list 123 rem deny tftp, http, tcp, icmp 167.100.234.x and 101
access-list 123 deny udp any 167.100.234.0 0.1.0.255 eq tftp
access-list 123 deny tcp any 167.100.234.0 0.1.0.255
access-list 123 deny icmp any 167.100.234.0 0.1.0.255

access-list 123 rem deny tftp, http, tcp, icmp 197.100.234.x and 235
access-list 123 deny udp any 192.100.234.0 0.0.1.255 eq tftp
access-list 123 deny tcp any 192.100.234.0 0.0.1.255
access-list 123 deny icmp any 192.100.234.0 0.0.1.255

access-list 123 rem deny tftp, http, tcp, icmp 197.100.236.x
access-list 123 deny udp any 192.100.236.0 0.0.0.255 eq tftp
access-list 123 deny tcp any 192.100.236.0 0.0.0.255
access-list 123 deny icmp any 192.100.236.0 0.0.0.255

access-list 123 rem deny tftp, http, tcp, icmp 182.245.1.1
access-list 123 deny udp any host 182.245.1.1 eq tftp
access-list 123 deny tcp any host 182.245.1.1
access-list 123 deny icmp any host 182.245.1.1

access-list 123 rem deny tftp, http, tcp, icmp 192.245.1.9
access-list 123 deny udp any host 192.245.1.9 eq tftp
access-list 123 deny tcp any host 192.245.1.9
access-list 123 deny icmp any host 192.245.1.9

access-list 123 permit ip any any

----- Original Message -----
From: "JAY" <JInciong@earthlink.net>
To: <ccielab@groupstudy.com>
Sent: Saturday, April 21, 2001 2:30 PM
Subject: ???Access-Lists???

> Can anyone tell me the most efficient way to do this.
>
> deny tftp, http, tcp, icmp 167.100.234.x
>
> deny tftp, http, tcp, icmp 167.101.234.x
>
> deny tftp, http, tcp, icmp 182.245.1.1
>
> deny tftp, http, tcp, icmp 192.245.1.9
>
> deny tftp, http, tcp, icmp 197.100.234.x
>
> deny tftp, http, tcp, icmp 197.100.235.x
>
> deny tftp, http, tcp, icmp 197.100.236.x
>
> TIA
>
> JAY
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:29:53 GMT-3