I have the access-list below on my router. When I do not put the permit any any on the inbound direction of my wan interface at the end of it I can not get internet service. Why is that? And if I put a permit any any to get the internet working but, does that leave me open for hackers on the internet?
access-list 101 permit tcp any host 10.100.1.12 eq ftp
access-list 101 permit tcp any host 10.100.1.12 eq 3389
access-list 101 permit ip any any