erface Ethernet 0
ip address 10.10.254.2 255.255.255.0
no ip proxy-arp
ip access-group 110 in
access-list 110 permit udp host 10.10.254.0 0.0.0.255
禁止所有别的从PIX防火墙发来的信息包：
access-list 110 deny ip any host 10.10.254.2 log
允许邮件主机和内部邮件服务器的SMTP邮件连接：
access-list permit tcp host 10.10.254.3 10.0.0.0 0.255.255.255 eq smtp
禁止别的来源与邮件服务器的流量：
access-list deny ip host 10.10.254.3 10.0.0.0 0.255.255.255
防止内部网络的信任地址欺骗：
access-list deny ip any 10.10.254.0 0.0.0.255
页码：[1] [2] [3] [4] [5] [6] [7] 第6页、共7页 |
