在华为交换机上配置ACL访问控制列表时.一般需阻止的常见的病毒和攻击端口有哪些啊`?

哪位高人给列出来一下..或者给个链接.....

叩谢!!!!

rule 0 deny tcp source-port eq 3127
rule 1 deny tcp source-port eq 1025
rule 2 deny tcp source-port eq 5554
rule 3 deny tcp source-port eq 9996
rule 4 deny tcp source-port eq 1068
rule 5 deny tcp source-port eq 137
rule 6 deny udp source-port eq netbios-ns
rule 7 deny tcp source-port eq 138
rule 8 deny udp source-port eq netbios-dgm
rule 9 deny tcp source-port eq 139
rule 10 deny udp source-port eq netbios-ssn
rule 11 deny tcp source-port eq 593
rule 12 deny tcp source-port eq 4444
rule 13 deny tcp source-port eq 5800
rule 14 deny tcp source-port eq 5900
rule 15 deny tcp source-port eq 8998
rule 16 deny tcp source-port eq 445
rule 17 deny udp source-port eq 445
rule 18 deny udp source-port eq 1434
rule 19 deny tcp destination-port eq 3127
rule 20 deny tcp destination-port eq 1025
rule 21 deny tcp destination-port eq 5554
rule 22 deny tcp destination-port eq 9996
rule 23 deny tcp destination-port eq 1068
rule 24 deny tcp destination-port eq 137
rule 25 deny udp destination-port eq netbios-ns
rule 26 deny tcp destination-port eq 138
rule 27 deny udp destination-port eq netbios-dgm
rule 28 deny tcp destination-port eq 139
rule 29 deny udp destination-port eq netbios-ssn
rule 30 deny tcp destination-port eq 593
rule 31 deny tcp destination-port eq 4444
rule 32 deny tcp destination-port eq 5800
rule 33 deny tcp destination-port eq 5900
rule 34 deny tcp destination-port eq 8998
rule 35 deny tcp destination-port eq 445
rule 36 deny udp destination-port eq 445
rule 37 deny udp destination-port eq 1434

好多的端口都不知道的哦

进来学习了...感谢了小兵朋友~

感谢2楼的，我在找这些东西！

谢谢分享

这个东西那里有，学习一下啊

也来学习以下

进来学习了...感谢了小兵

看一下!

还不知道有这些端口呢,

这里面有没有QQ的端口呀/4000/4001/433

就算你封掉了QQ的口，它还是能通过WEB代理的方式上去！

rule 0 deny udp destination-port eq tftp
rule 1 deny tcp destination-port eq 4444
rule 2 deny tcp destination-port eq 135
rule 3 deny udp destination-port eq 135
rule 4 deny udp destination-port eq netbios-ns
rule 5 deny udp destination-port eq netbios-dgm
rule 6 deny tcp destination-port eq 139
rule 7 deny udp destination-port eq netbios-ssn
rule 8 deny tcp destination-port eq 445
rule 9 deny udp destination-port eq 445
rule 10 deny udp destination-port eq 593
rule 11 deny tcp destination-port eq 593
rule 12 deny tcp destination-port eq 5554
rule 13 deny tcp destination-port eq 9995
rule 14 deny tcp destination-port eq 9996
rule 15 deny udp destination-port eq 1434
rule 16 deny tcp destination-port eq 1068
rule 17 deny tcp destination-port eq 5800
rule 18 deny tcp destination-port eq 5900
rule 19 deny tcp destination-port eq 10080
rule 20 deny tcp destination-port eq 455
rule 21 deny udp destination-port eq 455
rule 22 deny tcp destination-port eq 3208
rule 23 deny tcp destination-port eq 1871
rule 24 deny tcp destination-port eq 4510
rule 25 deny udp destination-port eq 4334
rule 26 deny tcp destination-port eq 4331
rule 27 deny tcp destination-port eq 4557
rule 28 deny udp destination-port eq 4444
rule 29 deny udp destination-port eq 1314
rule 30 deny tcp destination-port eq 6969
rule 31 deny tcp destination-port eq 137
rule 32 deny tcp destination-port eq 389
rule 33 deny tcp destination-port eq 138
rule 34 deny udp destination-port eq 136
rule 35 deny tcp destination-port eq 1025
rule 36 deny tcp destination-port eq 6129
rule 37 deny tcp destination-port eq 1029
rule 38 deny tcp destination-port eq 20168
rule 39 deny tcp destination-port eq 4899
rule 40 deny tcp destination-port eq 45576
rule 41 deny tcp destination-port eq 1433
rule 42 deny tcp destination-port eq 1434
rule 43 deny udp destination-port eq 1433
rule 100 permit ip destination 192.168.1.0 0.0.0.255
rule 101 permit icmp source 121.28.220.105 0 destination 121.28.220.106 0
rule 102 permit tcp destination-port eq telnet
rule 1000 deny ip
acl number 3002
rule 0 deny udp destination-port eq tftp
rule 1 deny tcp destination-port eq 4444
rule 2 deny tcp destination-port eq 135
rule 3 deny udp destination-port eq 135
rule 4 deny udp destination-port eq netbios-ns
rule 5 deny udp destination-port eq netbios-dgm
rule 6 deny tcp destination-port eq 139
rule 7 deny udp destination-port eq netbios-ssn
rule 8 deny tcp destination-port eq 445
rule 9 deny udp destination-port eq 445
rule 10 deny udp destination-port eq 593
rule 11 deny tcp destination-port eq 593
rule 12 deny tcp destination-port eq 5554
rule 13 deny tcp destination-port eq 9995
rule 14 deny tcp destination-port eq 9996
rule 15 deny udp destination-port eq 1434
rule 16 deny tcp destination-port eq 1068
rule 17 deny tcp destination-port eq 5800
rule 18 deny tcp destination-port eq 5900
rule 19 deny tcp destination-port eq 10080
rule 20 deny tcp destination-port eq 455
rule 21 deny udp destination-port eq 455
rule 22 deny tcp destination-port eq 3208
rule 23 deny tcp destination-port eq 1871
rule 24 deny tcp destination-port eq 4510
rule 25 deny udp destination-port eq 4334
rule 26 deny tcp destination-port eq 4331
rule 27 deny tcp destination-port eq 4557
rule 28 deny udp destination-port eq 4444
rule 29 deny udp destination-port eq 1314
rule 30 deny tcp destination-port eq 6969
rule 31 deny tcp destination-port eq 137
rule 32 deny tcp destination-port eq 389
rule 33 deny tcp destination-port eq 138
rule 34 deny udp destination-port eq 136
rule 35 deny tcp destination-port eq 1025
rule 36 deny tcp destination-port eq 6129
rule 37 deny tcp destination-port eq 1029
rule 38 deny tcp destination-port eq 20168
rule 39 deny tcp destination-port eq 4899
rule 40 deny tcp destination-port eq 45576
rule 41 deny tcp destination-port eq 1433
rule 42 deny tcp destination-port eq 1434
rule 43 deny udp destination-port eq 1433
rule 100 permit ip destination 192.168.1.0 0.0.0.255
rule 101 permit icmp source 222.222.59.17 0 destination 222.222.59.222 0
rule 102 permit tcp destination-port eq telnet
rule 1000 deny ip
acl number 3003
rule 0 deny udp destination-port eq tftp
rule 1 deny tcp destination-port eq 4444
rule 2 deny tcp destination-port eq 135
rule 3 deny udp destination-port eq 135
rule 4 deny udp destination-port eq netbios-ns
rule 5 deny udp destination-port eq netbios-dgm
rule 6 deny tcp destination-port eq 139
rule 7 deny udp destination-port eq netbios-ssn
rule 8 deny tcp destination-port eq 445
rule 9 deny udp destination-port eq 445
rule 10 deny udp destination-port eq 593
rule 11 deny tcp destination-port eq 593
rule 12 deny tcp destination-port eq 5554
rule 13 deny tcp destination-port eq 9995
rule 14 deny tcp destination-port eq 9996
rule 15 deny udp destination-port eq 1434
rule 16 deny tcp destination-port eq 1068
rule 17 deny tcp destination-port eq 5800
rule 18 deny tcp destination-port eq 5900
rule 19 deny tcp destination-port eq 10080
rule 20 deny tcp destination-port eq 455
rule 21 deny udp destination-port eq 455
rule 22 deny tcp destination-port eq 3208
rule 23 deny tcp destination-port eq 1871
rule 24 deny tcp destination-port eq 4510
rule 25 deny udp destination-port eq 4334
rule 26 deny tcp destination-port eq 4331
rule 27 deny tcp destination-port eq 4557
rule 28 deny udp destination-port eq 4444
rule 29 deny udp destination-port eq 1314
rule 30 deny tcp destination-port eq 6969
rule 31 deny tcp destination-port eq 137
rule 32 deny tcp destination-port eq 389
rule 33 deny tcp destination-port eq 138
rule 34 deny udp destination-port eq 136
rule 35 deny tcp destination-port eq 1025
rule 36 deny tcp destination-port eq 6129
rule 37 deny tcp destination-port eq 1029
rule 38 deny tcp destination-port eq 20168
rule 39 deny tcp destination-port eq 4899
rule 40 deny tcp destination-port eq 45576
rule 41 deny tcp destination-port eq 1433
rule 42 deny tcp destination-port eq 1434
rule 43 deny udp destination-port eq 1433
rule 100 permit ip source 192.168.1.0 0.0.0.255
rule 1000 deny ip

还不知道有这些端口呢

最好能解释一下是什么病毒端口

好多啊，能有具体解释就好了！

谢谢楼主分享!

14 楼 呵呵 把permit 哪些IP都贴上来了!

怎么配置