the filters I used to apply on an uplink port are:
(replace 1.2.3.x with your networs address)
**********************************
! Security Filters for Cisc0-Serial1 IN (Uplink) PAS 9706180
interface Serial1
no ip access-group 102 in
! delete acces list + recreate
no access-list 102
! Deny Spoofing of 1.2.3.0
access-list 102 deny ip 1.2.3.0 0.0.0.255 0.0.0.0 255.255.255.255
! Deny Netbios (OOB!), permit Netbios for selected only
access-list 102 permit ip host <customerhost> host 1.2.3.199
!
access-list 102 deny udp any 1.2.3.0 0.0.0.255 eq netbios-dgm
access-list 102 deny udp any 1.2.3.0 0.0.0.255 eq netbios-ns
access-list 102 deny tcp any 1.2.3.0 0.0.0.255 eq 139
!
access-list 102 permit ip any any
! reapply access-list
interface Serial1
ip access-group 102 in
!End Security Filter Serial1
**********************************
You'll edit this file to your needs, put it on a TFTP server and issue a
COPY TFTP RUN at the Cisco command line. It does not block PING, it
think that's a bad idea.
Already cought some attempts .....;
cu, Peter
Peter A. Sang
SANG Computersysteme GmbH * Kruppstr. 82-100 * 45145 Essen * Germany
T: +49-201-82020-0 * F:-40 * http://sang.net * mailto:pesa@sang.net
* Microsoft Solution Provider/Internet Specialist * Intel Systems
Integrator *
> -----Original Message-----
> From: Duane Schaub [SMTP:dschaub@terraworld.net]
> Sent: Friday, July 25, 1997 4:13 PM
> To: ntisp@iea.com
> Subject: Blocking Ping and Netbuie
>
> We have a new Cisco 4500 router. I would like to block all Netbeui
> traffic
> and maybe incoming pings.
>
> The serial port in question is ser1 and is our default gateway. I
> need to
> use netbeui on ser0 and both ether ports, but I don't want the world
> to
> have access. I believe that the ports in question are 137-140.
>
> I am not at all familiar with the Cisco... Could someone provide some
> specific details.
>
> Duane.
>
>
>
> ======================================================================
> ====
> Duane Schaub, President |Terra World, Inc - Connecting The
> Planet
> Terra World, Inc. |Southeast Kansas' Leading Provider
> 200 Arco Place, Suite 252 |Flat Fee - Never an hourly Charge
> Independence, Kansas 67301 |Where Service is Top Priority!
> Voice/Fax (316) 332-1616 |http://www.terraworld.net
> |info@terraworld.net or
> dschaub@terranet.net
> ======================================================================
> =====
>
> ----------------------------------------------------------
> NTISP Mailing List listserver@emerald.iea.com