trouble with ACL

dflores83 · ‎02-12-2009

Hi,

I have a doubt with some access list, I try this command in the interface outside but the interface didn't take the instruction.

access-list(access-list-name) extended deny tcp host 192.84.255.51 host(hostname) eq smtp

access-list(access-list-name) extended deny tcp host 192.84.255.51 host (hostname) eq https

I think that the two access-list don't working and the default access-list (deny any-any)

is the unique list good

Someone have any Idea?

thanks

Tshi M · ‎02-13-2009

I am a bit confused. How did you apply the ACL to the outside interface?

access-group name_of_acl in interface outside

rgds,

dflores83 · ‎02-13-2009

Hi,

yeah, I apply the same access-group

access-group name_of_acl in interface outside

Tshi M · ‎02-13-2009

OK. So what is working and not working? You are not able to block those hosts from access smtp and https? Do you have other lines in your config? what is your log showing?