RE: CISCO ACLs.. Are there lists already out there to protect me from trojans and known bad sites?

["Christopher Carpenter" <ccarpenter () dswa net>]

Look at it the other way.  You want to DENY ALL, then ALLOW SOME.  Block
all ports and IPs, and then grant access to the ones you need.

If you ALLOW ALL, DENY SOME you will end up fighting a losing battle
creating ACL after ACL.

Make sense?

C

-----Original Message-----
From: Pigeon [mailto:fredit () charter net] 
Sent: Tuesday, November 08, 2005 10:27 PM
To: security-basics () securityfocus com
Subject: CISCO ACLs.. Are there lists already out there to protect me
from trojans and known bad sites?

I just got my first cisco router in (well for home use :) ).. and I want
to 
lock my network down.. Are there any default ACL lists that will block:
A) known bad IPs
B) trojan ports
C) protection against spoofing (aka denying  private IP source port
incoming 
in the WAN port)

I know I will have to modify whatever I have.. but a general list would
be 
great!

thanks!