用ACL封堵 live的方法探讨

文章作者 100test 发表时间 2007:09:06 12:04:47
来源 100Test.Com百考试题网

　　经过测试以下方法对pplive 1.8及其以下版本完全有效。此方法在任何cisco router和支持访问控制列表功能的路由器上均有效，而且只需要基本版的IOS，不需要NBAR或者其他高级功能的支持。可以说是一个解决pplive 的大众版的解决方法。至于在前两个帖子里，有同仁提到的用Qos或者更好的方法解决各种p2p软件的问题，我这里做简单的回答。

　　1.BT 可以用Cisco的NBAR来解决，如果没有NBAR，则可以在路由器上建立IOS Firewall，因为在Firewall后的BT连接速度较慢，对网络影响不大。

　　2.电骡 emule 可以用Cisco的NBAR来解决，如果没有NBAR，则可以在路由器上建立IOS Firewall，因为在Firewall后的eMule连接速度较慢，对网络影响不大。

　　3.MSN Yahoo Messager QQ AOL等聊天软件，可以用NBAR和Access－list的方法来封堵

　　4.pplive ppstream等p2p视频软件，支持对这些软件的Qos功能的，在Cisco只有Cisco Service Control Application 支持，但是价格很贵，2x万左右，一般都是ISP或者大型校园网才会采用。

　　如果想对本帖的原理有兴趣，可以参见这两个帖子，如果没有兴趣，直接Ctrl－C，Ctrl－V即可。

　　以下是访问控制列表：

ip access-list extended deny-pplive remark pplive-type-I-udp-8000 deny ip any host 60.191.100.15 deny ip any host 60.209.6.12 deny ip any host 202.108.45.18 deny ip any host 58.211.1.210 deny ip any host 202.112.20.105 remark pplive-type-I-http deny ip any host 60.191.100.16 deny ip any host 202.108.45.19 deny ip any host 202.112.20.106 remark pplive-type-II-udp-8000 deny ip any host 58.211.1.207 deny ip any host 219.228.16.7 deny ip any host 60.209.6.15 remark pplive-type-II-http deny ip any host 60.209.6.16 deny ip any host 219.228.16.8 deny ip any host 58.211.1.214 remark pplive-type-III-udp-8000 deny ip any host 202.108.45.20 deny ip any host 60.191.100.13 deny ip any host 58.211.1.205 deny ip any host 219.228.16.2 deny ip any host 60.209.126.138 remark pplive-type-III-http deny ip any host 60.191.100.14 deny ip any host 219.228.16.3 deny ip any host 60.209.126.131 remark pplive-type-IV-udp-8000 deny ip any host 58.211.1.209 deny ip any host 58.211.1.205 deny ip any host 202.108.45.20 deny ip any host 219.228.16.2 deny ip any host 60.209.6.13 remark pplive-type-IV-http deny ip any host 219.228.16.3 deny ip any host 60.209.6.14 deny ip any host 58.211.1.216 remark pp.pplive.com deny ip any host 58.221.247.94 deny ip any host 58.221.247.92 deny ip any host 58.221.247.93 deny ip any host 58.211.136.153 deny ip any host 58.211.136.154 remark 0update.pplive.com deny ip any host 61.153.180.178 deny ip any host 61.153.180.179 deny ip any host 61.153.180.180 deny ip any host 61.178.92.134 deny ip any host 61.128.110.184 deny ip any host 61.128.110.185 deny ip any host 61.132.255.72 remark list.pplive.com deny ip any host 124.74.194.162 remark passport.pplive.com deny ip any host 58.221.247.92 deny ip any host 58.221.247.93 deny ip any host 58.221.247.94 remark www.pplive.com deny ip any host 58.221.247.94 deny ip any host 58.221.247.92 deny ip any host 58.221.247.93 deny ip any host 58.211.136.153 deny ip any host 58.211.136.154 remark res.pplive.com deny ip any host 58.221.247.92 deny ip any host 58.221.247.93 deny ip any host 58.221.247.94 remark p1.pplive.com deny ip any host 61.163.183.74 remark p2.pplive.com deny ip any host 58.240.223.85 remark p3.pplive.com deny ip any host 60.191.100.15 remark p4.pplive.com deny ip any host 202.108.45.33 remark pp1.pplive.com deny ip any host 61.178.92.133 deny ip any host 202.107.208.124 deny ip any host 58.211.1.233 remark pp2.pplive.com deny ip any host 58.221.247.94 deny ip any host 58.221.247.92 deny ip any host 58.221.247.93 deny ip any host 58.211.136.153 deny ip any host 58.211.136.154 remark pp3.pplive.com deny ip any host 211.152.45.123 remark pp4.pplive.com deny ip any host 211.152.45.98 deny ip any host 211.152.45.99 remark p5-X&.pp5-ppX.pplive.com deny ip any host 218.83.175.154 remark permit-other-packet permit ip any any