Blocking public IP's... 2

[americanmcneil]

Anyone know the commands on a Cisco router to block certain public IP's from the network? I cant afford a real firewall yet and the solution continues to elude me.

Any help is appreciated!

Scott "Thrown to the Wolves" McNeil

http://www.epproach.net

 

[North323]

what kind of cisco router? use acl's

 

[burtsbees]

Let's say the outside interface is fa0/0

access-list 101 deny ip host 11.1.1.1 any
access-list 101 deny ip host 131.12.13.21 host 192.168.1.45
access-list 101 permit ip any any
int fa0/0
ip access-group 101 in

That denies ip address 11.1.1.1 from reaching anyone behind this router, denies ip address 131.12.13.21 from reaching your host at 192.168.1.45, and permits everything else. With out the permit ip any any, everything else gets denied, which would be equivalent to

access-list 101 deny ip any any

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[VinceWhirlwind]

http://www.cisco.com/en/US/docs/rou...re/configuration/guide/advscen.html#wp1021891

 

[americanmcneil]

Burt (as always you are the man) and Vince thanks a ton! and North, its a Cisco 2611. Great little router, now if I can just get the damn thing configured correctly LOL.

Scott "Thrown to the Wolves" McNeil

http://www.epproach.net