Pix 520 blocking IP address range

[bwaldrop01]

I want to block all traffic from an IP range. What would be the best way to do this? We have a pix 520 running 6.3(3).

[sachinraja]

you need to configure an ACL on the 520 to do this..

eg, if you need to block from 10.1.1.0/28, you need to write the following ACL

access-list inside deny ip 10.1.1.0 255.255.255.240 any

access-list inside permit ip 10.1.1.0 255.255.255.0 any

access-group inside in interface inside

this will block any traffic from the subnet 10.1.1.0/28 and allow all other traffic from 10.1.1.0/24

hope this helps.. all the best..

Raj