Solved

blocking port 22 to a server on a procurve 5412zl switch

Posted on 2008-10-16
4
662 Views
Last Modified: 2012-05-05
I have a HP procurve 5412zl switch and I'm wanting to block access to TCP port #22 for all subnets but 10.1.1.0 but i'm having no luck. I've been trying an extended access control list but I can only seem to block the port going out from the server. I'm needing to block port access into the server.

Can I block ports this way and how do I do this?
0
Comment
Question by:shook1981
4 Comments
 
LVL 8

Expert Comment

by:MrJemson
ID: 22738025
Would probably be easier to configure the firewall on the server for this purpose.
What kind of box are you using? Is iptables installed? running?
0
 

Author Comment

by:shook1981
ID: 22740546
I have my reasons why I want to know how/if the switch can do this. I know how to block outgoing traffic just not the incoming
0
 
LVL 4

Accepted Solution

by:
Adraenyse earned 500 total points
ID: 24445936
Blocking inbound ports requires that you filter the source port to be larger than 1023 and the destination as 22. The source port will not be 22.

Your better bet is to write the ACL so that it accepts >1023 as source and 22 as destination where the source IP is 10.1.1.0 and then deny all other sources.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now