cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
228
Views
0
Helpful
2
Replies

Block a specific ip...

hornbeck
Level 1
Level 1

Hello,

What is the command syntax to block a single incoming ip address on a pix515e?

TIA,

Gary

2 Replies 2

sean
Level 3
Level 3

Are you running 6 code or 7 code?

Fernando_Meza
Level 7
Level 7

Hi .. try the shun command

In the following example, the offending host (10.1.1.27) makes a connection with the victim (10.2.2.89)

with TCP. The connection in the PIX Firewall connection table reads:

10.1.1.27, 555-> 10.2.2.89, 666 PROT TCP

If the shun command is applied in the following way:

shun 10.1.1.27 10.2.2.89 555 666 tcp

The preceding command would delete the connection from the PIX Firewall connection table, and it

would also prevent packets from 10.1.1.27 from going through the PIX Firewall. The offending host can

be inside or outside of the PIX Firewall.

If you use shun x.x.x.x it will block any packets coming from source x.x.x.x

I hope it helps .. please rate it if it does !!!!