FW: Access list problem [7:9939]

2001-07-02 Thread William Harrison

John,

Access list looks good, but do not forget https (442) and check your ip
statements (not enough info.)

HIH
Bill

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
John Brandis
Sent: Tuesday, June 26, 2001 3:26 AM
To: [EMAIL PROTECTED]
Subject: Access list problem [7:9939]


Hi All,

I thought I was on top of access lists, until today. When ever I apply
this particualr access list in IOS 11.2 , nothing on the network can
view internet pages. They can ping no problem but nothing else. Please
advise if you can, on which line the error is.
Thanks all, I appreciate it.

Extended IP access list 110
deny   tcp any any eq 139
permit udp any any eq domain
permit tcp any any eq domain
permit icmp any any
permit tcp any host 203.111.42.200 eq ftp-data
permit tcp any host 203.111.42.200 eq ftp
permit tcp any host 203.111.42.200 eq 22
permit tcp any host 203.111.42.204 eq ftp-data
permit tcp any host 203.111.42.204 eq ftp
permit tcp any host 203.111.42.204 eq www
permit tcp any host 203.111.42.204 eq 3389
permit tcp any host 203.111.42.215 eq smtp
permit tcp any host 203.111.42.215 eq www
permit tcp any host 203.111.42.215 eq 3389
permit ip host 203.111.42.224 any
permit ip host 203.111.42.225 any
permit ip host 203.111.42.226 any




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10628t=9939
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: FW: Access list problem [7:9939]

2001-07-02 Thread Claude-Vincent

William,

HTTPS port number is 443.

Claude-Vincent Perez
CCIE# 7419, CCDP, CCNP

--- William Harrison  wrote:
 John,
 
 Access list looks good, but do not forget https
 (442) and check your ip
 statements (not enough info.)
 
 HIH
 Bill
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of
 John Brandis
 Sent: Tuesday, June 26, 2001 3:26 AM
 To: [EMAIL PROTECTED]
 Subject: Access list problem [7:9939]
 
 
 Hi All,
 
 I thought I was on top of access lists, until today.
 When ever I apply
 this particualr access list in IOS 11.2 , nothing on
 the network can
 view internet pages. They can ping no problem but
 nothing else. Please
 advise if you can, on which line the error is.
 Thanks all, I appreciate it.
 
 Extended IP access list 110
 deny   tcp any any eq 139
 permit udp any any eq domain
 permit tcp any any eq domain
 permit icmp any any
 permit tcp any host 203.111.42.200 eq ftp-data
 permit tcp any host 203.111.42.200 eq ftp
 permit tcp any host 203.111.42.200 eq 22
 permit tcp any host 203.111.42.204 eq ftp-data
 permit tcp any host 203.111.42.204 eq ftp
 permit tcp any host 203.111.42.204 eq www
 permit tcp any host 203.111.42.204 eq 3389
 permit tcp any host 203.111.42.215 eq smtp
 permit tcp any host 203.111.42.215 eq www
 permit tcp any host 203.111.42.215 eq 3389
 permit ip host 203.111.42.224 any
 permit ip host 203.111.42.225 any
 permit ip host 203.111.42.226 any
[EMAIL PROTECTED]


=
Claude-Vincent Perez
CCIE# 7419, CCDP, CCNP

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=10641t=9939
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]