Overclockers Australia Forums
OCAU News - Wiki - QuickLinks - Pix - Sponsors  

Go Back   Overclockers Australia Forums > Specific Hardware Topics > Networking, Telephony & Internet

Notices


Sign up for a free OCAU account and this ad will go away!
Search our forums with Google:
Reply
 
Thread Tools
Old 3rd April 2006, 6:32 AM   #16
itsmydamnation Thread Starter
Member
 
itsmydamnation's Avatar
 
Join Date: Apr 2003
Location: Canberra
Posts: 8,457
Default

Quote:
Originally Posted by Whisper
I am very curious to see

Cheers
lol i'll try my very hardest today, friday was a killer didn't get home till 8:00
__________________
OCAU Guitar Players Club #22
xp2500 @2310 210x11 stock hsf |asus a7n8x deluxe | 1024mb ddr400 | X800 445/515
Get a grip adolf, you lost the war, and you can't kill any more jews.
Rhythm in jump. dancing close to you
itsmydamnation is offline   Reply With Quote

Join OCAU to remove this ad!
Old 4th April 2006, 8:27 AM   #17
itsmydamnation Thread Starter
Member
 
itsmydamnation's Avatar
 
Join Date: Apr 2003
Location: Canberra
Posts: 8,457
Default

Code:
hostname internode
!
logging queue-limit 100
enable secret 5 $1$V91F$AEQ.4RzCJLT2H4e8NNreB0
!
ip subnet-zero
!
!
ip audit notify log
ip audit po max-events 100
no ftp-server write-enable

!
bridge irb
!
!
interface Ethernet0
 no ip address
 bridge-group 1
 hold-queue 100 out
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35 
  encapsulation aal5snap
 !
 dsl operating-mode auto
 bridge-group 1
!
interface BVI1
 ip address 203.16.208.178 255.255.255.248
 ip access-group 102 in
!
ip classless
ip route 0.0.0.0 0.0.0.0 203.16.208.177
ip http server
no ip http secure-server
!
access-list 101 deny   tcp host 203.16.208.177 host 203.16.208.178 eq telnet
access-list 101 permit tcp 203.16.208.176 0.0.0.6 host 203.16.208.178 eq telnet
access-list 102 deny   icmp any any redirect
access-list 102 deny   ip 127.0.0.0 0.255.255.255 any
access-list 102 deny   ip 224.0.0.0 31.255.255.255 any
access-list 102 deny   ip host 0.0.0.0 any
access-list 102 permit ip any any
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
 no modem enable
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 101 in
 exec-timeout 5 0
 password ****************
 login
!
scheduler max-task-time 5000
!
__________________
OCAU Guitar Players Club #22
xp2500 @2310 210x11 stock hsf |asus a7n8x deluxe | 1024mb ddr400 | X800 445/515
Get a grip adolf, you lost the war, and you can't kill any more jews.
Rhythm in jump. dancing close to you
itsmydamnation is offline   Reply With Quote
Old 5th April 2006, 2:49 AM   #18
Whisper
Member
 
Whisper's Avatar
 
Join Date: Jun 2001
Location: Sydney
Posts: 8,307
Cool

Quote:
Originally Posted by itsmydamnation
Code:
hostname internode
!
logging queue-limit 100
enable secret 5 $1$V91F$AEQ.4RzCJLT2H4e8NNreB0
!
ip subnet-zero
!
!
ip audit notify log
ip audit po max-events 100
no ftp-server write-enable

!
bridge irb
!
!
interface Ethernet0
 no ip address
 bridge-group 1
 hold-queue 100 out
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35 
  encapsulation aal5snap
 !
 dsl operating-mode auto
 bridge-group 1
!
interface BVI1
 ip address 203.16.208.178 255.255.255.248
 ip access-group 102 in
!
ip classless
ip route 0.0.0.0 0.0.0.0 203.16.208.177
ip http server
no ip http secure-server
!
access-list 101 deny   tcp host 203.16.208.177 host 203.16.208.178 eq telnet
access-list 101 permit tcp 203.16.208.176 0.0.0.6 host 203.16.208.178 eq telnet
access-list 102 deny   icmp any any redirect
access-list 102 deny   ip 127.0.0.0 0.255.255.255 any
access-list 102 deny   ip 224.0.0.0 31.255.255.255 any
access-list 102 deny   ip host 0.0.0.0 any
access-list 102 permit ip any any
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
 no modem enable
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 101 in
 exec-timeout 5 0
 password ****************
 login
!
scheduler max-task-time 5000
!
Your config has changed, very obviously.

Add all the Private IP Address ranges to your Access-List 102
And you have left the routers http-server open to the Internet, although passworded.

Just read the link I gave earlier on securing a Cisco Router.
__________________
Quote:
There's something about philosophy that is at once humanising & utterly human. It's the court of last recourse. When the oracles have failed us, when the saints have grown silent & when god has chosen not to reveal himself. Then we stand back in the dark dark shadows of confusion & fear & ask, "What sort of being am I?" "What kind of life is right for me?" "& how should I govern, or be governed?"
Whisper is offline   Reply With Quote
Reply

Bookmarks

Sign up for a free OCAU account and this ad will go away!

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +10. The time now is 4:34 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd. -
OCAU is not responsible for the content of individual messages posted by others.
Other content copyright Overclockers Australia.
OCAU is hosted by Internode!