This filter will look like this one: #filter IP: 001 AND src-addr = 0.0.0.0/0; 002 AND dst-addr = <ip-addr>/<prefix>; 003 REJECT udp-dst-port = 69; 004 AND src-addr = 0.0.0.0/0; 005 AND dst-addr = <ip-addr>/<prefix>; 006 REJECT tcp-dst-port = 4444; 007 AND src-addr = 0.0.0.0/0; 008 AND dst-addr = <ip-addr>/<prefix>; 009 REJECT tcp-dst-port = 135; where <ip-addr>/<prefix> - is your ip-address pool. For more information read HiPer ARC Product Reference. You have to upload this filter file to arc using tftp. Wayne Barber wrote:
Can someone point to or send me some example filters for ARC? I would like to filter for the MSBlast worm at the modem pool.
Thanks, Wayne Barber Coastal Telco Services
_______________________________________________ USR-TC mailing list USR-TC@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc
-- alex, ICQ# 219089461, Current status