Administrativly scooped address

From: alsontra@hotmail.com
Date: Fri Jul 23 2004 - 00:41:33 GMT-3


Group,
          If asked to block private ip and multicast ranges, would the
following accomplish the task? I'm assuming there is an error in there
somewhere. I've checked this several times, but apparently I'm somehow making
mistakes?

ADMIN SCOPE FOR IPV4-

ip access-list extended RFC1918
 deny ip 10.0.0.0 0.255.255.255 any
 deny ip 172.16.0.0 0.15.255.255 any
 deny ip 192.168.0.0 0.0.255.255 any
 deny ip 224.0.0.0 15.255.255.255 any
 deny ip 240.0.0.0 15.255.255.255 any
 permit ip any any

ADMIN SCOPE FOR IPV4 MULTICAST

ip access-list extended RFC2365
 deny ip 239.0.0.0 0.255.255.255 any
 permit ip any any

Thanks,
Alsontra



This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:01 GMT-3