信息安全管理制度網(wǎng)絡(luò)安全設(shè)備配置規(guī)范-文庫(kù)吧資料
2025-04-23 04:58本頁(yè)面
【正文】 list 100 deny icmp any any maskrequest log(config) accesslist 100 permit icmp any (config) accesslist 100 deny udp any any range 33400 34400 log允許PING外網(wǎng)(config) accesslist 102 permit icmp any any echo(config) accesslist 102 permit icmp any any parameterproblem(config) accesslist 102 permit icmp any any packettoobig(config) accesslist 102 permit icmp any any sourcequench(config) accesslist 102 deny icmp any any log(config) accesslist 102 permit udp any any range 33400 34400 log Distributed Denial of Service (DDoS) Attacksaccesslist 170 deny tcp any any eq 27665 logaccesslist 170 deny udp any any eq 31335 logaccesslist 170 deny udp any any eq 27444 log! the Stacheldraht DDoS systemaccesslist 170 deny tcp any any eq 16660 logaccesslist 170 deny tcp any any eq 65000 log! the TrinityV3 systemaccesslist 170 deny tcp any any eq 33270 logaccesslist 170 deny tcp any any eq 39168 log! the Subseven DDoS system and some variantsaccesslist 170 deny tcp any any range 6711 6712 logaccesslist 170 deny tcp any any eq 6776 logaccesslist 170 deny tcp any any eq 6669 logaccesslist 170 deny tcp any any eq 2222 logaccesslist 170 deny tcp any any eq 7000 log4. 是否過(guò)濾訪問(wèn)路由器自身的通信？路由協(xié)議安全Routed Protocols TCP/IP協(xié)議 、RIP、OSPF、IGRP、EIGRP、BGPRoute Tables and Routing Protocols 1. Direct connection: 2. Static routing. 3. Dynamic routing. 4. Default routing. 建議： config tEnter configuration mands, one per line. End with CNTL/Z.(config) ip route 120(config) end。 UDP) Back Orifice161 (TCP amp。 UDP) netbiosssn177 (UDP) xdmcp445 (TCP) netbios (ds)512 (TCP) rexec515 (TCP) lpr517 (UDP) talk518 (UDP) ntalk540 (TCP) uucp1900, 5000 (TCP amp。 UDP) netbiosns138 (TCP amp。 UDP) sunrpc135 (TCP amp。 UDP) chargen37 (TCP amp。 UDP) discard11 (TCP) systat13 (TCP amp。 UDP) tcpmux7 (TCP amp。 (config) no accesslist 102 (config) accesslist 102 permit ip any (config) accesslist 102 deny ip any any log (config) interface eth 0/1 (configif) description internal interface (configif) ip address (configif) ip accessgroup 102 inl 拒絕從外網(wǎng)發(fā)出的源地址是內(nèi)部網(wǎng)絡(luò)地址的信息流l 拒絕所有從外網(wǎng)發(fā)出的源地址是保留地址、非法地址、廣播地址的信息流 Inbound Traffic (config) no accesslist 100 (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip any log (config) accesslist 100 deny ip host any log (config) accesslist 100 permit ip any (config) interface eth0/0 (configif) description external interface (configif) ip address (configif) ip accessgroup 100 in (configif) exit (config) interface eth0/1 (configif) description internal interface (configif) ip address (configif) end 入路由器外部接口阻塞下列請(qǐng)求進(jìn)入內(nèi)網(wǎng)的端口。（VPN or firewall)l 察覺(jué)受到入侵或特殊的危害。l 網(wǎng)絡(luò)安全策略的重大變動(dòng)。l 危害響應(yīng)列出危害響應(yīng)中個(gè)人或組織的注意事項(xiàng)定義系統(tǒng)被入
公司管理相關(guān)推薦
鄂ICP備17016276號(hào)-1