| Hi Zia,
Access-list are apllied only to that interface from
which the traffic enters PIX (befor version 7.0). If version is before 7.0
the last command should be
access-group 101 in interface inside.
Group: Please correct me if I missed
something.
Thanks
& Regards
Jasbir
Saharan
Pix#conf t
Pix#access-list 101 permit tcp host 192.168.101.2 any eq 80
Pix#access-list 101 deny ip any any
Pix#access-group 101 out interface outside
All outbound traffic is blocked accept from ISA server.
Zia
Khan <zia_khan2k yahoo.com> wrote:
Hi
Friends,
I need to allow only one IP address places INSIDE(the
one
for the proxy server) to browse through the PIX
firewall to the Internet.
What will be the commands in
the PIX firewall to block traffic to the
Internet from
all the network 192.168.101.0/24 but only
allow
192.168.101.2 (MS ISA Proxy/Webcacehe only using
single
NIC)?
Thanks
Zia
__________________________________________________
Do
You Yahoo!?
Tired of spam? ; Yahoo! Mail has the best spam protection
around
http://mail.yahoo.com
|