cisco防火墙防攻击详解(国外英语资料).doc

cisco防火墙防攻击详解(国外英语资料) Cisco Firewall anti attack detailed explanation Firewall, inside terminal (intranet) and outside terminal (extranet) Define intranet ACL: Access-list, inside-acl, extended, deny, UDP, any, any, EQ, TFTP Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, UDP, any, any, EQ, Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, UDP, any, any, EQ, netbios-ns Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, UDP, any, any, EQ, netbios-dgm Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, UDP, any, any, EQ, Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, deny, TCP, any, any, EQ, Access-list, inside-acl, extended, permit, IP, any, any Define extranet ACL: (default deny, any, any) Access-list, outside-acl, extended, permit, TCP, any, host, EQ, WWW Access-list, outside-acl, extended, permit, TCP, any, host, EQ, Access-list, outside-acl, extended, permit, TCP, any, host, EQ, HTTPS Access-list, outside-acl, extended, permit, TCP, any, EQ, POP3 Access-list, outside-acl, extended, permit, TCP, any, EQ, SMTP Access-list, outside-acl, extended, permit, TCP, any, host, EQ, domain Access-list, outside-acl, extended, permit, UDP, any, host, EQ, domain Access-list, outside-acl, extended, permit, TCP, any, host, EQ, Access-list, outside-acl, extended, permit, TCP, any, host, EQ, Access-list, outside-acl, extended, permit, TCP, any, host, EQ, lotusnotes Bind ACL to the interface Access-group, outside-acl, in, interface, outside Access-group, inside-acl, in, interface, inside Two, configuration instructions 1., internal network attacks, close some of the less commonly used and vulnerable to attack ports, such as: TFTP, 135, 137, 138, 139, 593, 4444 ports. Port: run