From: Sergio Jimenez Arguedas (sejimenez@its.co.cr)
Date: Thu Jul 22 2004 - 23:03:49 GMT-3
Hi Alsontra,
How about 127.0.0.0 0.255.255.255?
Rgds,
Sergio
-----Mensaje original-----
De: nobody@groupstudy.com [mailto:nobody@groupstudy.com]En nombre de
alsontra@hotmail.com
Enviado el: jueves, 22 de julio de 2004 21:42
Para: ccielab@groupstudy.com
Asunto: Administrativly scooped address
Group,
If asked to block private ip and multicast ranges, would the
following accomplish the task? I'm assuming there is an error in there
somewhere. I've checked this several times, but apparently I'm somehow
making
mistakes?
ADMIN SCOPE FOR IPV4-
ip access-list extended RFC1918
deny ip 10.0.0.0 0.255.255.255 any
deny ip 172.16.0.0 0.15.255.255 any
deny ip 192.168.0.0 0.0.255.255 any
deny ip 224.0.0.0 15.255.255.255 any
deny ip 240.0.0.0 15.255.255.255 any
permit ip any any
ADMIN SCOPE FOR IPV4 MULTICAST
ip access-list extended RFC2365
deny ip 239.0.0.0 0.255.255.255 any
permit ip any any
Thanks,
Alsontra
This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:01 GMT-3