2 Posts

November 6th, 2006 19:00

Sorry for some reason it submitted the thread by mistake.
 
I tried adding the following ACL on to the interface but everytime I do so it blocks ALL incoming udp. If I try doing so using IP it doesn't block anything.
 
ip access-list "ATTACK"
deny-udp 202.138.122.89 255.255.255.255 any any any
deny-udp 216.133.229.214 255.255.255.255 any any any
deny-udp 213.202.216.41 255.255.255.255 any any any
deny-udp 210.166.211.230 255.255.255.255 any any any
deny-udp 64.34.165.29 255.255.255.255 any any any
deny-udp 66.132.150.72 255.255.255.255 any any any
deny-udp 12.180.48.200 255.255.255.255 any any any
permit any any any
Than I bound the ACL to the interface port-channel 1. Once it's active it blocks ALL udp going to this interface. Not only from the specificied source-addresses.
 
I tried using "deny ip" and "deny udp" with "deny ip" nothing is being blocked, and with deny udp same problem as the table shown above.
No Events found!

Top