Help with access list.

[AjayM]

Everybody,

I'm a complete and total NOOB when it comes to messing around with Cisco routers, and it has now come time to setup an access list to deny traffic from one ip address.

Basically I've had around 1,000 attempted DOS attacks on our network since yesterday morning (about the last 30 hours), thankfully the firewall is stopping them all so I'm not worried on that end. However it is filling up my log files with a lot of junk that I'd really rather not look at.

The source ip address is 62.219.117.4 I basically don't want to see any traffic make through the router from this address (it's an overseas ISP and has nothing to do with our business). Can anybody walk me through the steps to take care of this?

TIA
Andrew

 

[ChrisAC]

collossus(config)#access-list 110 deny ip host 62.219.117.4 any log
collossus(config)#access-list 110 permit ip any any

Apply this inbound on the WAN side of the router usin the command

ip access-group 110 in

This will deny any incoming IP traffic from that host and permit everything else.

Chris.
**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************