From: Berry Mobley (MobleyB@bellsouth.net)
Date: Sat Apr 24 2004 - 23:29:00 GMT-3
Go here:
http://www.cymru.com/Bogons/index.html
Berry
>I want to setup Private address filtering on my ISP edge router. My ISP
>uses
>the 10.x.x.x network internally.
>
>This is the config that I am working on. Does anyone find anything wrong
>here? Should I be blocking the 127.x.x.x network?
>
>Interface S0/0
>Description TO ISP
>ip address 10.200.1.1 255.255.255.0
>ip access-group 103 in
>!
>access-list 103 permit 10.200.1.0 0.0.0.255 any
>access-list 103 deny ip 10.0.0.0 0.255.255.255 any
>access-list 103 deny ip 172.16.0.0 0.15.255.255 any
>access-list 103 deny ip 192.168.0.0 0.0.255.255 any
>access-list 103 deny ip 127.0.0.0 0.255.255.255 any
>access-list 103 permit ip any any
>
>Thanks,
>Carlos Marchini
>
>___
This archive was generated by hypermail 2.1.4 : Mon May 03 2004 - 19:48:55 GMT-3