<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>We have an AS5400 with some voip customers down it. SIP traffic, and other
kinds of traffic, passing through is fine, but we have had a spate of queries
from the world hitting the ethernet interface (ip address x.x.8.10) of the
AS5400 with SIP queries, probably feelers looking for open sip ports. I want an
ACL that will specifically block sip requests to this interface while allowing
everything else through.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>I was going to put in the following ACL --<BR><BR></DIV>
<DIV><FONT face="Courier New">ip access-list extended
block-world-sip</FONT></DIV>
<DIV><FONT face="Courier New">deny ip any host x.x.8.10 eq 5060
log-input</FONT></DIV>
<DIV><FONT face="Courier New">permit ip any any</FONT></DIV>
<DIV> </DIV>
<DIV>And put the following on the interface --</DIV>
<DIV> </DIV>
<DIV><FONT face="Courier New">ip access-group block-world-sip in</FONT></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV>I think this should accomplish the goal, but I wanted to ask first if there
is a better way of doing this.</DIV>
<DIV> </DIV></DIV></DIV></BODY></HTML>