Question Locked

Modifing Cisco access list

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

in my access list i have a line that says (near the top)

access-list 111 permit tcp any host 1.2.3.4 eq smtp

now i've written a script that goes through mail log and looks for ip's that are blocked by spamcop and want to block these from sending any future emails but it's not working

i'm adding this to my access-list

access-list 111 deny tcp host 121.147.116.226 any eq smtp

my question is since this is below the line allowing everything is that why it's allowing the mail to continue to come in?

if so is there any way to do this easily? i'm using perl and net::telnet to automatically (every hour or so) telnet to the cisco box and add these lines .. how do i force it as a rule ABOVE the permit line?

1 reply

This discussion is closed to new replies.