spreading

alsayed · ‎11-10-2007

hi

i have trogen spread via network via the Port 445 ?how can i block it via ACCESS-LIST?WHERE CAN I USE THE ACCESS-LIST,ON WITCH SWITCH!THE ACCESS OR THE Ds

10xs

Jon Marshall · ‎11-10-2007

Hi Ali

access-list 101 deny tcp any any eq 445

access-list 101 permit ip any any

You then apply this to your L3 interfaces whether they be routed ports or Vlan interfaces wherever you have client PC's or servers.

ip access-group 101 in

The problem is though that port 445 is used by Windows for a lot of it's functionality and if you block this port a lot of the pc's functionality will not work eg. things such as file sharing for example.

Jon