On Tue, 17 Aug 1999, Gerardo Soto wrote:
Hello Gerardo,
Actually, the reason I am asking is because my machines are always
a few thousand miles from me in Hawaii where I own my ISP and I am in San
Francisco so when someone hacks a box, I need some way to deny access to
that box from certain IP's til I can fix things. Normally, I can route
reject them on the host itself but sometimes they are faster than I am so
the access list on the Cisco would help.
Cheers,
Vince - [EMAIL PROTECTED] - [EMAIL PROTECTED] ________ __ ____
Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ]
GaiaNet Corporation - M & C Estate / / / / | / | __] ]
Beverly Hills, California USA 90210 / / / / / |/ / | __] ]
HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]
> Hi Vincent ,
> I agree with you but only if you are going to upload an
> independent access-list . What I meant is just to include it within the
> current access-list.
>
> > Hmmm, is that correct or is this more correct?
> >
> > access-list 100 deny ip host 207.211.200.74 208.164.68.199 any
> > access-list 100 permit ip any any
>
> > > Hi :
> > > All you have to do is :
> > >
> > > access-list 101 deny ip any host 208.164.68.199 host 208.164.68.121
> > >
> > > where ( 101 ) should be replaced by your actual access-list number .
> > >
> > > If you wish to log the connection attempts made by that ip address just
> > > add the word log at the end of the sentence.
> > >
> > > access-list 101 deny ip any host 208.164.68.199 host 208.164.68.121 log
> > >
> > > That way you can keep track of it .
> > > Hope this helps!! REGARDS !!!
> > >
> > > > Speaking about Cisco access lists, how do I block a ip say
> > > > 208.164.68.199 from connecting with any service to my machine
> > > > 208.164.68.121?
> > > >
> > > >
> > > > Cheers,
> > > > Vince - [EMAIL PROTECTED] - [EMAIL PROTECTED] ________ __ ____
> > > > Unix Networking Operations - FreeBSD-Real Unix for Free / / / / | / |[__ ]
> > > > GaiaNet Corporation - M & C Estate / / / / | / | __] ]
> > > > Beverly Hills, California USA 90210 / / / / / |/ / | __] ]
> > > > HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]
> > >
> > >
> >
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]