全部封堵关闭端口

配置 高级acl 

acl里面deny 这些端口

packet-filter 3000 inbound

应用外网出口入方向 

1、关于高危端口的封堵，可通过ACL来实现，以下是配置脚本，请参考：

acl advanced 3999
description gaoweiduankou_lanjie
rule 0 deny tcp destination-port eq 135
rule 1 deny tcp destination-port eq 137
rule 2 deny tcp destination-port eq 138
rule 3 deny tcp destination-port eq 139
rule 4 deny tcp destination-port eq 445
rule 5 deny tcp destination-port eq 3389

rule 6 deny udp destination-port eq 135
rule 7 deny udp destination-port eq 137
rule 8 deny udp destination-port eq 138
rule 9 deny udp destination-port eq 139
rule 10 deny udp destination-port eq 445
rule 11 deny udp destination-port eq 3389


rule 12 deny tcp source-port eq 135
rule 13 deny tcp source-port eq 137
rule 14 deny tcp source-port eq 138
rule 15 deny tcp source-port eq 139
rule 16 deny tcp source-port eq 445
rule 17 deny tcp source-port eq 3389

rule 18 deny udp source-port eq 135
rule 19 deny udp source-port eq 137
rule 20 deny udp source-port eq 138
rule 21 deny udp source-port eq 139
rule 22 deny udp source-port eq 445
rule 23 deny udp source-port eq 3389

quit

int gi 1/0/1

packet-filter 3999 inbound

packet-filter 3999 outbound

quit