| Thomson Sid and Zia, Please have a look at this... Pix#conf t Pix(config)#access-list 101 permit tcp host 192.168.101.2 any eq 80 Pix(config)#access-list 101 permit udp host 192.168.101.2 any eq 53 // allowing dns requests Pix(config)#access-list 101 permit tcp host 192.168.101.2 any eq 443 //for https traffic Pix(config)#access-list 101 deny ip any any // this line is not required coz its implicit deny anywayz Pix(config)#access-group 101 in interface inside Pix(config)#wr mem Try this...however.... just out of curiosity are u using PIX 7.x code by any chance? rgds Kris... Thomson siddhartha <thomsonsid yahoo.co.in> wrote: Pix#conf t Pix#access-list 101 permit tcp host 192.168.101.2 any eq 80 Pix#access-list 101 deny ip any any Pix#access-group 101 out interface outside All outbound traffic is blocked accept from ISA server. Zia Khan <zia_khan2k yahoo.com> wrote: Hi Friends,
I need to allow only one IP address places INSIDE(the one for the proxy server) to browse through the PIX firewall to the Internet. What will be the commands in the PIX firewall to block traffic to the Internet from all the network 192.168.101.0/24 but only allow 192.168.101.2 (MS ISA Proxy/Webcacehe only using single NIC)?
Thanks Zia
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo!
Mail has the best spam protection around http://mail.yahoo.com
What makes Sachin India's highest paid sports celebrity?, Share your knowledge on Yahoo! India Answers
Send instant messages to your online friends - NOW
What makes Sachin India's highest paid sports celebrity?, Share your knowledge on Yahoo! India Answers
Send instant messages to your online friends - NOW
|