Was wondering if someone could show me an example on how to deny a partiular web-site by using extended access-list commands...

access-list 120 deny ip 10.2.0.0 0.0.0.0 204.40.128.10 0.0.0.0 eq 80

int e0
ip access-group 120 out

Report this post to a moderator

access-list 120 deny tcp any host xxx.xxx.xxx.xxx eq 80
...
int eth0
ip access-group 120 in

This will block all HTTP traffic coming from hosts on eth0, destined for host with IP address xxx.xxx.xxx.xxx. Note that you need to know the IP address of the web server. If you know the network the server resides on, but you don't know the particular address of the server, you can use "net-address wildcard-bits" instead of "host xxx.xxx.xxx.xxx".

Cheers!


[This message has been edited by dmaftei (edited 01-08-2001).]

Report this post to a moderator

Thanks...

Report this post to a moderator