Access-list Problem with UDP Port 53

2000-11-28 Thread Richie, Nathan
Title: Access-list Problem with UDP Port 53 I am having a problem with an access-list on a 2600 router.  It used for the clients T1 connection.  the access-list as follows: access-list 100 deny   ip 10.0.0.0 0.255.255.255 any access-list 100 deny   ip 172.16.128.0 0.0.15.255 any access

Re: Access-list Problem with UDP Port 53

2000-11-28 Thread Timothy Metz
Access-list Problem with UDP Port 53Could you clarify your network configuration? Is the 2600 at your location and connected to the client via the T-1 on serX? I just did some similar but even more restrictive acl's at my job. Tim ""Richie, Nathan"" <[EMAIL PROTECTED]> wrote in message [EMAIL PR

Re: Access-list Problem with UDP Port 53

2000-11-28 Thread Trentj
Title: Access-list Problem with UDP Port 53 Try the followin: access-list 100 permit udp any eq domain any     DNS queries go out on a dynamic UDP source port and the destination UDP port is 53. On the response to the DNS query, the UDP datagram is source UDP port 53, and the destination

RE: Access-list Problem with UDP Port 53

2000-11-29 Thread Timothy Metz
Title: RE: Access-list Problem with UDP Port 53 Correct, when you make a tcp or udp request on a known port (dns, smtp, ftp, etc, check http://www.isi.edu/in-notes/iana/assignments/port-numbers for a list), the response from the destination is always (supposed to be always) returned on a