Block whole class C ip address/PIX520

[eperson2000]

Hi

I am trying to find out how I can block entire class c in (Cisco pix 520/IOS 6.1).

Can someone help me ?

I couldn't find anything in cisco resource center.

[eperson2000]

I am not certain if this command is for it.

ex.

>access-group acl_grp in inside

>access-list acl_grp deny tcp any 1.1.1.0 255.255.255.0

Can someone verify this command so I can apply this?

[jessie-smith]

Command looks good if you are trying to block internal hosts from accessing this external class c..but if you were trying to prevent the external hosts from talking to internal host, I would apply it to my outside interface. Hope this helps.