Cisco 1700

You sort of answered your own question :-)

yea i realized that. i was using telnet just now. but i cant seem to access the router. i was trying

open but i have the wrong host

pretty much is the same.........

Thanks Guys appreciate it. you will probably hear from me again.

Peace Dan

open original image

I have a cisco 1700 running IOS 12.1(8). It is running as the gateway between us and our ISP They have given me the username/password for the

router(config)#access-list 110 deny tcp any any eq 6881 router(config-if)#ip access-group 110 in

and at that point our net goes down. I get cut from the telnet session i'm in and I have to reset the router. any help? I also tried:

router(config)#access-list 110 deny tcp any #.#.#.# 0.0.0.0 eq 6881 (where the # is our IP) router(config-if)#ip access-group 110 in

Please can someone help me? We are getting a flood of 6881 syn packets from a huge number of sources. At first I thought it was BitTorrent but it has been continuing for 3 days now and I have checked every machine and we have no BT clients running.

There is an implicit deny any any at the bottom of every access-list, doing it the way you are doing it you just need to add in access-list

Flamer.

Oh and also, what ip address have you actually specified, why not block this traffic to all ip addresses? deny tcp any any eq 6881

Flamer.

access-list 110 deny tcp any any eq 6881

is equivalent to

no access-list 110 access-list 110 deny tcp any any eq 6881 access-list 110 deny ip any any

What you want I imagine is

no access-list 110 access-list 110 deny tcp any any eq 6881 access-list 110 permit ip any any