SMTP access list

2000-07-12 Thread Deloso, Elmer G.
Title: SMTP access list Hi, all. Just to verify my understanding of extended access-lists: this continues to parse the entries even after a match has already been found, so if the first few lines have a "permit" and later down the last few lines it encounters a "deny", wha

Re: SMTP access list

2000-07-15 Thread D. J. Jones
Title: SMTP access list I think you need to have the 3rd line because if you do not, then all other traffic will be denied. ""Shahir Boshra"" <[EMAIL PROTECTED]> wrote in message 8khoes$ch4$[EMAIL PROTECTED]">news:8khoes$ch4$[EMAIL PROTECTED]... E

Re: SMTP access list

2000-07-12 Thread Shahir Boshra
Title: SMTP access list Elmer,   The router applies the first match and neglects the remaining lines. i.e. in your example, only any traffic from the 3 mentioned sources & carrying smtp will be allowed. Note that the last 2 lines are unnecessary, as the implicit deny any will apply in

Re: SMTP access list

2000-07-12 Thread Michael Fountain
No, once the router finds a match, it quits examining the access-list and either permits or denies the packet. Even if there are lines later in the list that would also be a match the router stops with the first match it finds. >Hi, all. >Just to verify my understanding of extended access-l

Re: SMTP access list

2000-07-12 Thread Omar Khawaja
the algorithm is designed to exit the moment it finds a match. so, as soon as there is a match, the remaining lines of the access-list are never looked at. > "Deloso, Elmer G." wrote: > > Hi, all. > Just to verify my understanding of extended access-lists: this > continues to parse the entries

Re: SMTP access list

2000-07-12 Thread Shahir Boshra
Title: SMTP access list Elmer,   The router applies the first match and neglects the remaining lines. i.e. in your example, only any traffic from the 3 mentioned sources & carrying smtp will be allowed. Note that the last 2 lines are unnecessary, as the implicit deny any will apply in

Re: SMTP access list

2000-07-12 Thread John Hardman
Title: SMTP access list Hi   Nope, as soon as a match in the list is made, it is processed, and no longer considered by the ACL. So in your example a packet with a source address of 193.128.233.177 on TCP port 25 it would forwarded/routed to the IP/forwarding interface.   HTH-- John Hardman