From: alsontra@hotmail.com
Date: Fri Jul 23 2004 - 00:41:33 GMT-3
Group,
If asked to block private ip and multicast ranges, would the
following accomplish the task? I'm assuming there is an error in there
somewhere. I've checked this several times, but apparently I'm somehow making
mistakes?
ADMIN SCOPE FOR IPV4-
ip access-list extended RFC1918
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
deny ip 224.0.0.0 15.255.255.255 any
deny ip 240.0.0.0 15.255.255.255 any
permit ip any any
ADMIN SCOPE FOR IPV4 MULTICAST
ip access-list extended RFC2365
deny ip 239.0.0.0 0.255.255.255 any
permit ip any any
Thanks,
Alsontra
This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:01 GMT-3