acl number 3010
rule 5 deny tcp destination-port eq 23
rule 10 deny tcp destination-port eq 80
rule 15 deny tcp destination-port eq 20
rule 20 deny tcp destination-port eq 21
rule 25 deny tcp destination-port eq 443
rule 30 deny udp destination-port eq 23
rule 35 deny udp destination-port eq 80
rule 40 deny udp destination-port eq 20
rule 45 deny udp destination-port eq 21
rule 50 deny udp destination-port eq 443

rule 55 deny udp destination-port eq 161
rule 60 deny udp destination-port eq 162



rule 10 deny udp destination-port range 1 1000 
#
traffic classifier call_acl_3010 
 if-match acl 3010
#
traffic behavior call_acl_3010
permit
#
traffic policy call_acl_3010
 classifier call_acl_3010 behavior call_acl_3010

#
interface GigabitEthernet0/0/0
traffic-policy call_acl_3010 inbound
 ip address 10.10.10.1 255.255.255.0 
#

nat server protocol tcp global current-interface 9999 inside 1.1.1.2 23
nat server protocol tcp global current-interface 1001 inside 1.1.1.2 telnet