Cisco 3640 ACL Question

[bristolxyz]

To deny in and out access via ACL on a Cisco 3640...

Suppose this is the ip of the offender or offending one..(Porn spammers)

Query :

http://www.ever-co.com

Offical Name =

http://www.ever-co.com

Aliases =
Addresses = 211.161.159.169


What would teh deny and permit statements look like, I'm haveing a bit of difficluty..

Other than Ciscoworks, is there a software or utility for editing and loading ACL's?

 

[routerman]

access-list 10 deny host 211.161.159.169
access-list 10 permit any

int x/x
ip access-group 10 in

This would block any ip traffic from that source address, then allow any other traffic in.

You could limit to certain ports using an extended list if you wanted.

Another way would be to define a static route to that address with the next hop to null0, this way return traffic is dropped, may be more efficient than an access list.

ip route 211.161.159.169 255.255.255.255 null0