conduit deny

[hiepnguyen]

what is the conduit deny command if i want to deny a port or and ipaddress??

[hiepnguyen]

i put this command in but the address is still coming thru

conduit deny ip any 64.254.0.0 255.255.255.0

the connection is still live. is there an explicit kill command??

[michael-oneil]

--

try 'clear xlate'

.

.

This will/should clear the connection translation which is all open connections, as well as just opening connections.

[markvtran]

conduit deny tcp any eq "port number" any

to deny that certain port number

conduit deny tcp host "ip address" "mask" any

to deny certain ip address