!
class-map match-any p2p
match protocol fasttrack file-transfer "*"
match protocol gnutella file-transfer "*"
match protocol kazaa2 file-transfer "*"
match protocol napster
match protocol bittorrent
match protocol edonkey
match protocol directconnect
match protocol winmx
!
policy-map p2p
class p2p
police cir 8000 bc 1000 be 1000
conform-action transmit
exceed-action drop
violate-action drop
!
access-list 109 deny 53 any any
access-list 109 deny 55 any any
access-list 109 deny 77 any any
access-list 109 deny pim any any
access-list 109 deny tcp any any eq 135
access-list 109 deny udp any any eq 135
access-list 109 deny tcp any any range 137 139
access-list 109 deny udp any any range netbios-ns netbios-ss
access-list 109 deny tcp any any eq 445
access-list 109 deny tcp any any eq 593
access-list 109 permit ip any any
!
interface FastEthernet0/0
ip address ip.ip.ip.ip 255.255.255.240 secondary
ip address ip.ip.ip.ip 255.255.255.240
ip access-group 109 in
no ip redirects
no ip unreachables
ip nbar protocol-discovery
no ip mroute-cache
duplex full
no keepalive
no cdp enable
!