PIX515E成功封QQ案列

network

PIX515E成功封QQ案列


XX公司强烈要求封QQ，禁止员工上半时间QQ聊天，在老板强压之下，我被迫。。。经过反复测试，效果还真是不错,疯狂的小企鹅变成了灰色，安静下来了。
access-list qq deny udp any any eq 4000
access-list qq deny udp any any eq 8000
access-list qq deny tcp any host 219.133.49.171
access-list qq deny tcp any host 58.60.14.31
access-list qq deny tcp any host 58.60.14.34
access-list qq deny tcp any host 58.60.14.35
access-list qq deny tcp any host 58.60.14.37
access-list qq deny tcp any host 58.60.14.38
access-list qq deny tcp any host 58.60.14.39
access-list qq deny tcp any host 58.60.14.40
access-list qq deny tcp any host 58.60.14.41
access-list qq deny tcp any host 58.60.14.42
access-list qq deny tcp any host 58.60.14.43
access-list qq deny tcp any host 58.60.14.44
access-list qq deny tcp any host 58.60.14.115
access-list qq deny tcp any host 58.60.15.171
access-list qq deny tcp any host 219.133.60.32
access-list qq deny tcp any host 219.133.60.33
access-list qq deny tcp any host 219.133.60.34
access-list qq deny tcp any host 219.133.60.35
access-list qq deny tcp any host 219.133.60.36
access-list qq deny tcp any host 219.133.60.38
access-list qq deny tcp any host 219.96.170.164
access-list qq deny tcp any host 219.133.38.135
access-list qq deny tcp any host 219.133.38.136
access-list qq deny tcp any host 219.133.40.130
access-list qq deny tcp any host 219.133.40.138
access-list qq deny tcp any host 219.133.40.179
access-list qq deny tcp any host 219.133.48.87
access-list qq deny tcp any host 219.133.48.88
access-list qq deny tcp any host 219.133.49.73
access-list qq deny tcp any host 219.133.40.97
access-list qq deny tcp any host 219.133.49.163
access-list qq deny tcp any host 219.133.49.164
access-list qq deny tcp any host 219.133.49.169
access-list qq deny tcp any host 219.133.49.170
access-list qq deny tcp any host 219.133.49.172
access-list qq deny tcp any host 219.133.49.173
access-list qq deny tcp any host 58.60.14.32
access-list qq deny tcp any host 58.60.14.33
access-list qq deny tcp any host 219.133.60.37
access-list qq deny tcp any host 219.133.48.89
access-list qq deny tcp any host 219.133.40.37
access-list qq deny tcp any host 219.133.60.39
access-list qq deny tcp any host 219.133.38.5
access-list qq deny tcp any host 219.133.38.230
access-list qq deny tcp any host 219.133.38.5
access-list qq deny tcp any host 58.60.14.45
access-list qq deny tcp any host 219.133.49.211
access-list qq deny tcp any host 219.133.60.173
access-list qq deny tcp any host 219.133.48.103

access-list qq deny udp any host 219.133.49.171
access-list qq deny udp any host 58.60.14.31
access-list qq deny udp any host 58.60.14.34
access-list qq deny udp any host 58.60.14.35
access-list qq deny udp any host 58.60.14.37
access-list qq deny udp any host 58.60.14.38
access-list qq deny udp any host 58.60.14.39
access-list qq deny udp any host 58.60.14.40
access-list qq deny udp any host 58.60.14.41
access-list qq deny udp any host 58.60.14.42
access-list qq deny udp any host 58.60.14.43
access-list qq deny udp any host 58.60.14.44
access-list qq deny udp any host 58.60.14.115
access-list qq deny udp any host 58.60.15.171
access-list qq deny udp any host 219.133.40.97
access-list qq deny udp any host 219.133.49.73
access-list qq deny udp any host 219.133.60.32
access-list qq deny udp any host 219.133.60.33
access-list qq deny udp any host 219.133.60.34
access-list qq deny udp any host 219.133.60.35
access-list qq deny udp any host 219.133.60.36
access-list qq deny udp any host 219.133.60.38
access-list qq deny udp any host 219.96.170.164
access-list qq deny udp any host 219.133.38.135
access-list qq deny udp any host 219.133.38.136
access-list qq deny udp any host 219.133.40.130
access-list qq deny udp any host 219.133.40.138
access-list qq deny udp any host 219.133.40.179
access-list qq deny udp any host 219.133.48.87
access-list qq deny udp any host 219.133.48.88
access-list qq deny udp any host 219.133.49.163
access-list qq deny udp any host 219.133.49.164
access-list qq deny udp any host 219.133.49.169
access-list qq deny udp any host 219.133.49.170
access-list qq deny udp any host 219.133.49.172
access-list qq deny udp any host 219.133.49.173
access-list qq deny udp any host 58.60.14.32
access-list qq deny udp any host 58.60.14.33
access-list qq deny udp any host 219.133.60.37
access-list qq deny udp any host 219.133.48.89
access-list qq deny udp any host 219.133.40.37
access-list qq deny udp any host 219.133.60.39
access-list qq deny udp any host 219.133.38.5
access-list qq deny udp any host 219.133.38.230
access-list qq deny udp any host 219.133.38.5
access-list qq deny udp any host 58.60.14.45
access-list qq deny udp any host 219.133.49.211
access-list qq deny udp any host 219.133.60.173
access-list qq deny udp any host 219.133.48.103
access-list qq permit ip any any
access-group qq in interface inside

如果这个不好用了，就说明tencent又添加了新的服务器，需要在PC sniffer或者在pix show conn，show xlate来查找新服务器IP地址及对应的port