|
Jomy,
That's a good question, but I don't think so - mainly because you're using dynamic, resolution would be a bit more difficult.
How about using a small range from your DHCP server scope, and reserve these IP addresses for each host you intend to block.
That way you can use a standard src acl to deny, and still provide dynamic IP.
BU.
|