Using NBAR to block Nimda

Wed Sep 19 23:06:41 UTC 2001

Matt,

Look at the following two URLs and then combine the config:

http://www.cisco.com/warp/customer/63/nimda.shtml

http://www.cisco.com/warp/customer/63/nbar_acl_codered.shtml

Alex Yeung

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
> Matt Martini
> Sent: Wednesday, September 19, 2001 3:41 PM
> To: nanog at merit.edu
> Subject: Using NBAR to block Nimda
> 
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> 
> 
> Does anyone have a comprehensive filter to stop Nimda using Cisco's NBAR?
> 
> Matt
> 
> 
> __________________________ http://www.invision.net/ _______________________
> 
>  Matthew E. Martini, PE        InVision.com, Inc.   (631) 543-1000 x104
>  Chief Technology Officer      matt at invision.net    (631) 864-8896 Fax
> _______________________________________________________________________pgp_
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.1i
> 
> iQEVAwUBO6ke4GtXn16/JS7ZAQEUoAgAjvwY/fnoJmtmMke03I8uOIxDNUzGqX+e
> sP5L9Fcekg4qKF7Jix4dW+Hk+jZuwp0cSHwRsiGswqIHgHZVjRjliMD4QTjDO4FU
> vYUSKM4nedZhTBjIDlMp3AT9BfLjI1pV1tzYbo2L8otMGdeO3Iv/Ymd+LGZx22Fl
> eNvIOE+LzfipupFcA12AXstJvTH9QZ4Vuzap7ckxzA5NrTXtWphhjiLX0gKqlTsc
> aXp/oL/UfzMps7LiF+my2OsKCBIjyA+mLon0qdS5vs8rGtuES3wADmX/sDF8wuhr
> 9LFpI2VmM5JcrjwwEZIfc5Iq6M4h0so3nfwJDyBh0x5cDlDNimWH6w==
> =+Ucd
> -----END PGP SIGNATURE-----
> 
> 