|
现在很多网管都要根据老板的命令在办公室里封杀QQ或者禁止QQ登录上网，因为那样往往是利用上班时间来闲聊，影响工作的效率。这可以通过ACL（访问控制列表）来达到，当然这个方法能够被代理给绕过。
设置ACL来封杀QQ上网的命令行如下：
Conf t
Ip access-list ext stop qq
deny udp any any eq 8000
deny udp any any eq 8001
deny udp any any eq 4000
deny udp any any eq 4001
deny udp any host 61.144.238.145
deny udp any host 61.144.238.146
deny udp any host 202.104.129.251
deny udp any host 202.104.129.252
deny udp any host 202.104.129.253
deny udp any host 202.104.129.254
deny udp any host 218.18.95.236
deny ip any host 218.17.209.23
deny ip any host 218.17.209.42
deny ip any host 218.18.95.220
deny ip any host 219.133.38.5
deny ip any host 219.133.38.132
deny ip any host 219.133.38.178
deny ip any host 219.133.38.230
deny ip any host 219.133.49.5
deny ip any host 219.133.49.6
permit ip any any
int fa0/1 #ISP进口
ip access-group 100 out
ctrl+z
#wr
| 
