包过滤

您好，请知：

可以配置高级ACL来实现对高危端口的拦截，以下是配置脚本，请参考：

acl number 3000

 rule 0 deny tcp destination-port eq 135
rule 5 deny tcp destination-port eq 137
rule 10 deny tcp destination-port eq 138
rule 15 deny tcp destination-port eq 139
rule 20 deny tcp destination-port eq 445
rule 25 deny tcp destination-port eq 3389
rule 30 deny tcp destination-port eq 4899

rule 40 deny tcp source-port eq 135
rule 45 deny tcp source-port eq 137
rule 50 deny tcp source-port eq 138
rule 55 deny tcp source-port eq 139
rule 60 deny tcp source-port eq 445
rule 65 deny tcp source-port eq 3389
rule 70 deny tcp source-port eq 4899

quit

int gi 1/0/1

packet-filter 3000 inbound

packet-filter 3000 outbound

quit