Are your people dialing in having to go through your company proxy server to get to the internet? If so, they're probably talking with the proxy server, which no doubt would have an internal address and be let through by that access list.
Which interface are you applying this access-list? In which direction (in/out)? Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28961&t=28927 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]