From: Scott Morris (swm@emanon.com)
Date: Tue Oct 05 2004 - 17:55:31 GMT-3
That would be much better!
-----Original Message-----
From: Joseph D. Phillips [mailto:josephdphillips@fastmail.us]
Sent: Tuesday, October 05, 2004 12:18 PM
To: Scott Morris
Cc: 'Matthew Seppeler'; 'zou wei'; ccielab@groupstudy.com
Subject: Re: Filtering private ip address
The correct ACL mask for that network is 0.15.255.255, n'est-ce pas?
Scott Morris wrote:
>If you use a 0.31.255.255 mask, you are going to block everything from
>.0 through .31 in the B's range. You may want to re-think your binary
there!
>
>
>Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
>CISSP, JNCIP, et al.
>IPExpert CCIE Program Manager
>IPExpert Sr. Technical Instructor
>swm@emanon.com/smorris@ipexpert.net
>http://www.ipexpert.net
>
>
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>Matthew Seppeler
>Sent: Tuesday, October 05, 2004 9:29 AM
>To: zou wei; ccielab@groupstudy.com
>Subject: RE: Filtering private ip address
>
>Here you go.
>
>access-list 1 deny 10.0.0.0 0.255.255.255 access-list 1 deny 172.0.0.0
>0.31.255.255 access-list 1 deny 192.168.0.0 0.0.255.255 access-list 1
>permit any
>
>Any fewer lines than this in trying to merge these network addresses
>into one or two statements will end up excluding more networks than you
>intend to filter.
>
>Matt Seppeler
>InterNetwork Experts
>Email: mseppeler@inetx.com
>
>
>-----Original Message-----
>From: zou wei [mailto:zwzq@hotmail.com]
>Sent: Tuesday, October 05, 2004 2:48 AM
>To: ccielab@groupstudy.com
>Subject: Filtering private ip address
>
>Hi:
>
>Could anyone tell me how to filter private addresses using the least
>commands?
>
>10.0.0.0 - 10.255.255.255
>172.16.0.0 - 172.31.255.255
>192.168.0.0 - 192.168.255.255
>
>Thanks
>
>Wei
>
>-----------------------------------------------------------------------
>-
>
>Dont just search. Find. Check out the new MSN Search!
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:43 GMT-3