Yes. Assuming you have a block of 8 ip's from your provider (10.0.0.0/29), and you are using .0 for the network, .1 for the router, and .2 for the firewall, you could block the rest quite easily by: ip route 10.0.0.3 255.255.255.255 null0 ip route 10.0.0.4 255.255.255.252 null0 Null0 routes are less processor intensive than access lists, and do not generate an ICMP Administratively prohibited message. -EJ -----Original Message----- From: Rajeev Karamchand [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 24, 2001 11:36 AM To: [EMAIL PROTECTED] Subject: Blocking the unsed IP [7:13514] All Is there a way to block all unused external IP ===== Rajeev Karamchand MCSE,MCSE+I,MCDBA,CCNA __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=13542&t=13514 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]