You can build your access lists without specifying hosts by using "any" as
source & destination addresses and specify the ports for FTP & IRC.
Web-based chats may be difficult to control, and people use buddy-list
programs to chat as well. If you want to stop those, you'll have to find out
the ports they use and block those. Don't forget the implicit "Deny All"
that's taken for granted with each access list, so after blocking those
ports you'll have to insert an allow all statement as well.
Hope this helps. Refer to IOS documentation for the exact syntax.
Bharat
""Very Gentle Guy"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Dear all,
>
> I need to restrict my users to be able to use all chat sevrices and have
no
> browsing or ftp things, how do you think i can built my access list to do
> so?
>
> Do I have to mention host addresses or I can control it through opening
> access to specific ports only>
>
> Thanks for your help
> Ref
>
____________________________________________________________________________
_________
> Get more from the Web. FREE MSN Explorer download :
http://explorer.msn.com
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
