I'd apply it on R3's E0... access-list 101 deny tcp host 172.16.1.1 host 192.168.1.1 eq ftp
int e0 ip access-group 101 in Assuming: HostA IP address: 172.16.1.1 Server IP address: 192.168.1.1 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66550&t=66546 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]