Date: Thu, 30 Nov 2000 09:43:57 -0800 (PST) From: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net> To: bdan@c-zone.net (Dan Babb) Cc: jon_slivko@simphost.com (Jonathan M. Slivko), freebsd-security@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: Danger Ports Message-ID: <200011301743.JAA44928@gndrsh.dnsmgr.net> In-Reply-To: <Pine.BSF.4.21.0011292044170.36849-100000@flux.c-zone.net> from Dan Babb at "Nov 29, 2000 08:45:03 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
Please do all the rest of us a favor and filter the packets to reserved networks, not just from them. > this is right out of the ACL for my core router.. > > ! reserved networks > access-list 110 deny ip 127.0.0.0 0.0.0.255 any log > access-list 110 deny ip 10.0.0.0 0.255.255.255 any log > access-list 110 deny ip 172.16.0.0 0.15.255.255 any log > access-list 110 deny ip 172.31.0.0 0.0.255.255 any log > access-list 110 deny ip 192.168.0.0 0.0.255.255 any log access-list 110 deny ip any 127.0.0.0 0.0.0.255 log access-list 110 deny ip any 10.0.0.0 0.255.255.255 log access-list 110 deny ip any 172.16.0.0 0.15.255.255 log access-list 110 deny ip any 172.31.0.0 0.0.255.255 log access-list 110 deny ip any 192.168.0.0 0.0.255.255 log -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200011301743.JAA44928>