Router 3660 blocking specific ports

[fastdoo]

How do I go about blocking specific ports on my 3660 using access-lists? Also is there a way to do this so that no one can scan my network and see that I am blocking ports?

 

[haknwak]

GEt a cco login

http://tools.cisco.com/RPF/register/register.do

and read

http://www.cisco.com/warp/public/707/confaccesslists.html

and regarding the scanning - the best you can do is make a port scanner's life difficult. Lots of tricks you can use in ACLS but with experience and the right tools, they can figure out just about anything "If you lived here, you'd be home by now!"

George Carlin

 

[b4rtm4n]

Also have a look at

Cisco Access lists field guide --- mcGraw Hill
Cisco IOS access lists --- O'Reilly
Hardening Cisco Routers --- O'Reilly

These three have saved me a load of effort and earnt me a fair few freelance quid )) $cd /pub
$more beer

http://www.security-forums.com