華為－3com內部資料若幹...

內部資料，作為俺來韆傢的見麵禮吧，赫赫

以后還有一些內部資料，願意和大傢分享

怎么上傳不暸，算暸，貼上來吧

NE16-4(config)#firewall enable all

//首先启动防火墙

NE16-4(config)#access-list 101 deny tcp any any eq 445

NE16-4(config)#access-list 102 deny tcp any any eq 5554

NE16-4(config)#access-list 103 deny tcp any any eq 9996

//deny为禁止的关键字，针对tcp报文，any any 为所有源、目的IP，eq为等于， 445, 5554, 9996为tcp端口号

NE16-4(config-if-Ethernet2/2/0)#ip access-group 101 in

NE16-4(config-if-Ethernet2/2/0)#ip access-group 102 in

NE16-4(config-if-Ethernet2/2/0)#ip access-group 103 in

ACL的配置如下:

acl name anti_worm advanced

rule 0 deny udp destination-port eq tftp

rule 1 deny tcp destination-port eq 135

rule 2 deny udp destination-port eq 135

rule 3 deny udp destination-port eq 137

rule 4 deny udp destination-port eq 138

rule 5 deny tcp destination-port eq 139

rule 6 deny udp destination-port eq netbios-ssn

rule 7 deny tcp destination-port eq 445

rule 8 deny udp destination-port eq 445

rule 9 deny tcp destination-port eq 539

rule 10 deny udp destination-port eq 539

rule 11 deny tcp destination-port eq 593

rule 12 deny udp destination-port eq 593

rule 13 deny udp destination-port eq 1434

rule 14 deny tcp destination-port eq 4444

acl name anti_icmp advanced

rule 0 deny icmp （如果病毒严重再加这一项）

rule-map intervlan r1 tcp any any eq 135

rule-map intervlan r2 udp any any eq 135

rule-map intervlan r3 udp any any eq 137

rule-map intervlan r4 udp any any eq 138

rule-map intervlan r5 udp any any eq 139

rule-map intervlan r6 tcp any any eq 139

rule-map intervlan r7 tcp any any eq 445

rule-map intervlan r8 udp any any eq 445

rule-map intervlan r9 udp any any eq 539

rule-map intervlan r10 tcp any any eq 539

rule-map intervlan r11 tcp any any eq 593

rule-map intervlan r12 udp any any eq 593

rule-map intervlan r13 udp any any eq 1434

rule-map intervlan r14 tcp any any eq 4444

rule-map intervlan r15 tcp any any eq 5554

rule-map intervlan r16 tcp any any eq 9996

eacl aaa r1 deny priority 32768

eacl aaa r2 deny priority 32800

eacl aaa r3 deny priority 32832

eacl aaa r4 deny priority 32864

eacl aaa r5 deny priority 32896

eacl aaa r6 deny priority 32928

eacl aaa r7 deny priority 32960

eacl aaa r8 deny priority 32992

eacl aaa r9 deny priority 33024

eacl aaa r10 deny priority 33056

eacl aaa r11 deny priority 33088

eacl aaa r12 deny priority 33120

eacl aaa r13 deny priority 33152

eacl aaa r14 deny priority 33184

eacl aaa r15 deny priority 33216

eacl aaa r16 deny priority 33248

[em02]

[em05]

什么啊。。有的话就发到我的邮箱吧。。。wlys_switch@163.com

给我也来一份

xiaonaijia@126.com

算我一个！

huangzeliang1982@yahoo.com.cn

也算我一个，谢谢了啊！1130xiaoxu@163.com

我也要先谢谢了

wxj1824@126.com

[em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05][em05]