a slight modification to ACL 112

bmanning at ISI.EDU bmanning at ISI.EDU
Tue Aug 11 13:12:44 UTC 1998


For those of you with access lists, I've made this small modification to
the list that I originally got via Andrew Partan. You may wish to consider
the change in respect to your own acls.  In cisco format:


access-list 112 deny   ip host 0.0.0.0 any
!	Loopback
access-list 112 deny   ip 127.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255
!	RFC 1918 space
access-list 112 deny   ip 10.0.0.0 0.255.255.255 255.0.0.0 0.255.255.255
access-list 112 deny   ip 172.16.0.0 0.15.255.255 255.240.0.0 0.15.255.255
access-list 112 deny   ip 192.168.0.0 0.0.255.255 255.255.0.0 0.0.255.255
!	Test Network
access-list 112 deny   ip 192.0.2.0 0.0.0.255 255.255.255.0 0.0.0.255
! 	IPv4 LinkLocal
access-list 112 deny   ip 169.254.0.0 0.0.255.255 255.255.0.0 0.0.255.255


--bill



More information about the NANOG mailing list