<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[静怡家园]]></title> 
<link>http://www.zhanghaijun.com/index.php</link> 
<description><![CDATA[书山有路勤为径，学海无涯苦作舟！]]></description> 
<language>zh-cn</language> 
<copyright><![CDATA[静怡家园]]></copyright>
<item>
<link>http://www.zhanghaijun.com/post//</link>
<title><![CDATA[华为3528G，acl的配制，封IP,端口]]></title> 
<author>碟舞飞扬 &lt;webmaster@zhanghaijun.com&gt;</author>
<category><![CDATA[技术文章]]></category>
<pubDate>Mon, 16 May 2011 17:34:29 +0000</pubDate> 
<guid>http://www.zhanghaijun.com/post//</guid> 
<description>
<![CDATA[ 
	最近有一服务器被攻击了，攻击我的80端口，还好这个服务器上没有开网页服务，于是做acl禁掉。<br/>创建并进入acl 3000<br/>acl number 3000<br/>创建rule 0 禁止 目的地址 xxx.xxx.xxx.xxx 0(这个0是反掩码) 目的端口是80<br/>rule 0 deny tcp destination xxx.xxx.xxx.xxx 0 destination-port eq www<br/>进入上行端口<br/>interface GigabitEthernet 1/1<br/>下发规则<br/>packet-filter inbound ip-group 3000 rule 0
]]>
</description>
</item><item>
<link>http://www.zhanghaijun.com/post//#blogcomment</link>
<title><![CDATA[[评论] 华为3528G，acl的配制，封IP,端口]]></title> 
<author> &lt;user@domain.com&gt;</author>
<category><![CDATA[评论]]></category>
<pubDate>Thu, 01 Jan 1970 00:00:00 +0000</pubDate> 
<guid>http://www.zhanghaijun.com/post//#blogcomment</guid> 
<description>
<![CDATA[ 
	
]]>
</description>
</item>
</channel>
</rss>