The command you reference is for context-based access control (cbac), part
of the firewall feature set (ffs).  What it is and how it works are clearly
explained in the cisco documentation at cisco.com.  Here's a shortcut link
that gives you all the basics:

http://www.cisco.com/warp/public/110/32.html

Your config was munged, so it's hard to say why your having the problems you
report.  Offhand it sounds like a dns lookup problem, but that's just a
guess.

HTH,
Kent

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Kenny Smith
Sent: Thursday, May 09, 2002 7:51 PM
To: [EMAIL PROTECTED]
Subject: why "ip inspect" block my traffic? [7:43802]


Hi..  Can you tell me what is the function of the following command ?  My
previous administrator configured it.  But we found that the we can!&t surf
the net thru this router.  The www traffic take very long time to load and
pass thru this router.  But after I issue !'no ip inspect name fw in!(, we
are able to access the web traffic.  Why??

ip inspect name fw tcp
ip inspect name fw udp
ip inspect name fw smtp
ip inspect name fw ftp

interface ethernet0
!K!K!K!K.
!K!K!K!K.
interface ethernet1
!K!K!K!K..
!K!K!K!K..
ip inspect name fw


_________________________________________________________________
Join the worlds largest e-mail service with MSN Hotmail.
http://www.hotmail.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=43829&t=43802
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to