On Tue, 17 Aug 1999, Gerardo Soto wrote:

Hello Gerardo,

        Actually, the reason I am asking is because my machines are always
a few thousand miles from me in Hawaii where I own my ISP and I am in San
Francisco so when someone hacks a box, I need some way to deny access to
that box from certain IP's til I can fix things.  Normally, I can route
reject them on the host itself but sometimes they are faster than I am so
the access list on the Cisco would help.


Cheers,
Vince - [EMAIL PROTECTED] - [EMAIL PROTECTED]           ________   __ ____ 
Unix Networking Operations - FreeBSD-Real Unix for Free / / / / |  / |[__  ]
GaiaNet Corporation - M & C Estate                     / / / /  | /  | __] ]  
Beverly Hills, California USA 90210                   / / / / / |/ / | __] ]
HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]



> Hi Vincent ,
>       I agree with you but only if you are going to upload an
> independent access-list . What I meant is just to include it within the
> current access-list. 
> 
> >     Hmmm, is that correct or is this more correct?
> > 
> > access-list 100 deny ip host 207.211.200.74 208.164.68.199 any
> > access-list 100 permit ip any any
>
> > > Hi :
> > >   All you have to do is :
> > > 
> > > access-list 101 deny  ip any host 208.164.68.199  host 208.164.68.121
> > > 
> > > where ( 101 ) should be replaced by your actual access-list number .
> > > 
> > >  If you wish to log the connection attempts made by that ip address just
> > > add the word log at the end of the sentence.
> > > 
> > > access-list 101 deny  ip any host 208.164.68.199  host 208.164.68.121 log
> > > 
> > > That way you can keep track of it . 
> > >   Hope this helps!!  REGARDS !!!
> > > 
> > > >         Speaking about Cisco access lists,  how do I block a ip say
> > > > 208.164.68.199 from connecting with any service to my machine
> > > > 208.164.68.121?
> > > > 
> > > > 
> > > > Cheers,
> > > > Vince - [EMAIL PROTECTED] - [EMAIL PROTECTED]           ________   __ ____ 
> > > > Unix Networking Operations - FreeBSD-Real Unix for Free / / / / |  / |[__  ]
> > > > GaiaNet Corporation - M & C Estate                     / / / /  | /  | __] ]  
> > > > Beverly Hills, California USA 90210                   / / / / / |/ / | __] ]
> > > > HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]
> > > 
> > > 
> > 
> 
> 

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to