ip access-list extended deny_ddos deny ip object-group deny_ddos any permit ip object-group permit_other any
interface FastEthernet0/0/0 description Out-web80-1 (CNportal) ip address 115.85.150.130 255.255.255.248 ip access-group deny_ddos in no ip redirects no ip unreachables no ip proxy-arp ip nat outside ip virtual-reassembly in duplex auto speed auto