ПРОЕКТЫ 

  АРХИВ 

Apache-Talk @lexa.ru 

Inet-Admins @info.east.ru 

Filmscanners @halftone.co.uk 

Security-alerts @yandex-team.ru 

nginx-ru @sysoev.ru 

  СТАТЬИ 

  ПЕРСОНАЛЬНОЕ 

  ПРОГРАММЫ 

ПИШИТЕ
ПИСЬМА












     АРХИВ :: Inet-Admins
Inet-Admins mailing list archive (inet-admins@info.east.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [inet-admins] Cisco FAQ...

  • To: inet-admins@east.ru
  • Subject: Re: [inet-admins] Cisco FAQ...
  • From: "Basil V. Dolmatov" <dol>
  • Date: Fri, 8 Aug 1997 19:04:35 +0400 (MSD)
  • In-Reply-To: <199708081855.SAA04257@ sut.ru> from "Andrey Podkolzin" at "Aug 8, 97 06:55:20 pm"
  • Reply-To: inet-admins@east.ru
  • Sender: inet-admins@east.ru
> > Кстати, рекомендуется еще прописать такие же routes для private-networks,
> > это предотвратит их случайное выбрасывание в сторону провайдера.
> > ip route 10.0.0.0    255.0.0.0   Null0 100
> > ip route 172.16.0.0  255.240.0.0 Null0 100
> > ip route 192.168.0.0 255.255.0.0 Null0 100
> Гы
> 
> access-list 100 deny ip host 0.0.0.0 any 
> access-list 100 deny ip 127.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 
> access-list 100 deny ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255 
> access-list 100 deny ip 172.16.0.0 0.15.255.255 255.240.0.0 0.15.255.255 
> access-list 100 deny ip 192.168.0.0 0.0.255.255 255.255.0.0 0.0.255.255 
> access-list 100 deny ip 192.0.2.0 0.0.0.255 255.255.255.0 0.0.0.255 
> access-list 100 deny ip 128.0.0.0 0.0.255.255 255.255.0.0 0.0.255.255 
> access-list 100 deny ip 191.255.0.0 0.0.255.255 255.255.0.0 0.0.255.255 
> access-list 100 deny ip 192.0.0.0 0.0.0.255 255.255.255.0 0.0.0.255 
> access-list 100 deny ip 223.255.255.0 0.0.0.255 255.255.255.0 0.0.0.255 
> access-list 100 deny ip 224.0.0.0 31.255.255.255 224.0.0.0 31.255.255.255 
> access-list 100 deny ip any 255.255.255.128 0.0.0.127 
> access-list 100 permit ip any any
> 
> Во! :))
Это - само собой... Но routes очень полезны тоже.. Чтобы ничего не билось
в access-lists и не мусорило в логах... :)))

> 
> latah,
> mdh
> =============================================================================
> "inet-admins" Internet access mailing list. Maintained by East Connection ISP.
> Mail "unsubscribe inet-admins" to Majordomo@east.ru if you want to quit.
> List archive is accessible at http://www.east.ru/inet-admins/
> 

--------------------------------------
Basil (Vasily)  Dolmatov   dol@east.ru        +7-095-956-4951
East Connection ISP, Moscow, Russia. (http://www.east.ru)

Nick handles ;) : BVD12, DOL1-RIPE, VVD2-RIPN

=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@east.ru if you want to quit.
List archive is accessible at http://www.east.ru/inet-admins/

 



Copyright © Lexa Software, 1996-2009.