Block range of IP's

[geomic]

Hi,
this is my first question, hope some1 can help.
I would like to block range of IP's to access my network (example 12.28.200.0-12.28.200.255).

What line I have to add to Pix configuration?
Thanks

 

[pixboy]

Try this:

conduit deny any 12.28.200.0 255.255.255.0

Someone double-check me, but that should deny any traffic from 12.28.200.0/24 to anywhere behind the firewall.

After you put it in, you should be able to issue "show conduit" and see how many hits there were on that particular statement. (You'll see hitcount=x at the end of the statement.)

Dan

 

[caryfields]

But also be aware that 'conduit' is superceaded by access-lists.

 

[yizhar]

HI.

It depends on your PIX version and current configuration.

For newer versions (6.x) you can use PDM for access-list management which is a GUI interface for the PIX.

If you post here more details, you'll get better answers.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar