If you wanted to do this, why not write an access
lists blocking the specific hosts/subnets that you do
not want to be reachable with ICMP and permit all ICMP
after that?

Why do you want to block local ICMP anyways and allow
external? It's usually the other way around.
--- SH Wesson <[EMAIL PROTECTED]> wrote:
> I want to create an access list such that a user can
> ping out and get a 
> response, but at the same time to be able to not
> have anyone to ping in.  I 
> tried an access list denying icmp for IN on that
> interface, but that totally 
> stops the pings from going out or in.  Any
> assistance on how I can get this 
> accomplish would be greatly appreciated.  Thankx.
>
________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at
> http://www.hotmail.com
> 
> ___________________________________
> UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


=====
Dan West -- CCNA

__________________________________________________
Do You Yahoo!?
Get Yahoo! Mail � Free email you can access from anywhere!
http://mail.yahoo.com/

___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to