I tried this again but only applied it to the Ethernet interface and it
shuts off all ports and not just the 119 ..........on this router for some
strange reason. I figured the Ethernet port was safe to test as I would
still be able to get to it from the outside world.
Any ideas on this one people?
Tim D
-----Original Message-----
From: Akatosh [mailto:[EMAIL PROTECTED]]
Sent: Sunday, September 02, 2001 6:52 PM
To: Tim
Cc: Imail
Subject: Re: [IMail Forum] Block NNTP in Cisco
conf t
acc 101 deny tcp any any eq 119
acc 101 deny tcp any eq 119 any
then apply it to an interface the person is on like this
int serial0/0
ip access-group 101 in
and there ya go, no nntp in either direction
the syntax for that is like this
acc 101 [permit or deny] [ip/tcp/udp/icmp] from frommask to tomask
eq ## can be thrown in after an address/mask to specify a port, 'any' is a
shortcut for '0.0.0.0 255.255.255.255'
search for the access-list command on cisco's website for better
documentation
On Sun, 2 Sep 2001, Tim wrote:
> Anyone know the EXACT command needed to block ALL NNTP (port 119) access
to
> and from a network from a command prompt in a Cisco router?
>
> I have a customer who's network admin has hijacked a few of their servers
> (linux) and is using them to run a news server, ftp server and I want to
> shut them off by blocking them from the router which I do have the proper
> passwords for..where I don't for the linux boxes. And, I am 1800 miles
away
> from either!
>
> Tim
>
>
>
>
>
>
> _______________________________________________________________
> Sent using Novelty Mail the FREE EMAIL SERVICE. Click here
http://noveltymail.com to get your own free email using this or ANY of our
fun domain names.
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
--
Edward Fahner
Systems Administrator, Planet Communications Network
(540)442-6677 x222 [aka. Akatosh .CU.Au, [EMAIL PROTECTED]]
DC2.DwGmL--WT--SksCre+\Cvi+BflA(+r-v+++)N^MH+$-Fj~R+Ac+++!J+S+U-I--#V+++Q+Tc
++
_______________________________________________________________
Sent using Novelty Mail the FREE EMAIL SERVICE. Click here http://noveltymail.com to
get your own free email using this or ANY of our fun domain names.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
