From owner-freebsd-isp Thu Jan 9 1:39:46 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CC22237B401 for ; Thu, 9 Jan 2003 01:39:45 -0800 (PST) Received: from flock1.newmail.ru (flock1.newmail.ru [212.48.140.157]) by mx1.FreeBSD.org (Postfix) with SMTP id 2769043F5B for ; Thu, 9 Jan 2003 01:39:44 -0800 (PST) (envelope-from Andrew.Karjagin@newmail.ru) Received: (qmail 13736 invoked by alias); 9 Jan 2003 09:39:41 -0000 Message-ID: <20030109093941.13735.qmail@flock1.newmail.ru> From: Andrew Karjagin To: freebsd-isp@freebsd.org Subject: access-list from scan X-Priority: 3 MIME-Version: 1.0 X-Mailer: DenMail v1.0 by ORC X-Uid: 689 X-RemoteIP: 81.89.65.2 (81.89.64.66) Date: Thu, 09 Jan 2003 12:39:41 +0300 Content-type: text/plain; charset="koi8-r" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello! I have a four class C networks behind a Cisco 7206. That networks processed by some smaller cisco routers and FreeBSD servers. Sometimes I have a problem with scanning my networks from other hosts. Some smaller cisco routers stop work. Freebsd servers stop the scanning by portsentry program and it work Ok! Question: Where can I find resources/sites with docs about configuring access-list on Cisco, that can help me to stop the scanning of my networks on main Cisco 7206? Is that possible to stop scan and other attacks on Cisco by using access-list or I have to use another features/progs? Thank you very much for help! __________ www.newmail.ru -- Новая Почта: все по новому. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message