blocking port 6346

Here is a simple link defining how to create an access-list which would then be applied either incoming or outgoing on your designated interface:

Use a ACL to block this: access-list 102 deny tcp any any eq 6346 access-list 102 permit ip any any

J>

Failed to mentioned that you'll need to assign this rule to a interface as either in or out (incoming rule or outgoing rules). ex: int dialer0 access-group 102 in

int dialer0 access-group 102 out

note* This will prevent packet destined to port 6346 going out.

or maybe in your case you can do both in and out on the same interface. One thing to keep in mind and that is in general you want the rule closest to the source. Therefore if you want to block incoming from the internet use the dialer0 or whatever is connected to the Internet. If you suspect (and I think this is the case) it's users on the internal LAN that is initiating the requests apply the rule to the Interface that is connected to the LAN (FastEthernet or what have you).

Jon