acl number 3000
rule 0 deny udp destination-port eq tf
rule 1 deny tcp destination-port eq 4444
rule 2 deny tcp destination-port eq 135
rule 3 deny tcp destination-port eq 139
rule 4 deny tcp destination-port eq 445
rule 5 deny tcp destination-port eq 593
rule 6 deny tcp destination-port eq 5554
rule 7 deny tcp destination-port eq 9995
rule 8 deny tcp destination-port eq 9996
rule 9 deny tcp destination-port eq 1068
rule 10 deny tcp destination-port eq 5800
rule 11 deny tcp destination-port eq 5900
rule 12 deny tcp destination-port eq 10080
rule 13 deny tcp destination-port eq 1871
rule 14 deny tcp destination-port eq 4510
rule 15 deny tcp destination-port eq 4331
rule 16 deny tcp destination-port eq 4557
rule 17 deny udp destination-port eq 135
rule 18 deny udp destination-port eq netbios-ns
rule 19 deny udp destination-port eq netbios-dgm
rule 20 deny udp destination-port eq netbios-ssn
rule 21 deny udp destination-port eq 445
rule 22 deny udp destination-port eq 593
quit
packet-filter inbound ip-group 3000 interface Ethernet 0/1 to Ethernet 0/23
quit
save
阅读(771) | 评论(0) | 转发(0) |