This filter will look like this one:

#filter
IP:

001 AND src-addr = 0.0.0.0/0;
002 AND dst-addr = <ip-addr>/<prefix>;
003 REJECT udp-dst-port = 69;
004 AND src-addr = 0.0.0.0/0;
005 AND dst-addr = <ip-addr>/<prefix>;
006 REJECT tcp-dst-port = 4444;
007 AND src-addr = 0.0.0.0/0;
008 AND dst-addr = <ip-addr>/<prefix>;
009 REJECT tcp-dst-port = 135;

where <ip-addr>/<prefix> - is your ip-address pool. For more information read HiPer ARC Product Reference.
You have to upload this filter file to arc using tftp.

Wayne Barber wrote:
Can someone point to or send me some example filters for ARC? I would 
like to filter for the MSBlast worm at the modem pool.

Thanks,
Wayne Barber
Coastal Telco Services


_______________________________________________
USR-TC mailing list
USR-TC@mailman.xmission.com
http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

--
alex,
ICQ# 219089461,
Current status