Help with IOS Firewall

usuario0001 · ‎05-14-2009

Hi all,

I'm trying to use IOS Firewall on a 2811 router. I use 2 interfaces F0/0 as a WAN interface to internet and VLAN1 as a LAN interface.

This is the configuration I'm trying:

ip inspect name Firewall pop3

ip inspect name Firewall imap3

interface vlan1

ip inspect Firewall in

I understand that with this configuration I couldn't be able to connect to http, but I can do it from my LAN.

Can anybody help me? I just want to restrict the use of some protocols.

Regards

Collin Clark · ‎05-14-2009

ACL's block/permit traffic and inspect keeps trsck of TCP sessions. What exactly are you trying to do?

usuario0001 · ‎05-14-2009

I want to block some protocols.

Thanks

Collin Clark · ‎05-14-2009

OK, Let's say you want to block SMTP for everyone but the mail server.

<code> ip access-list extended BLOCK_SMTP remark Allow EMail server SMTP permit tcp host 192.168.1.10 any eq 25 remark Block ALL SMTP deny tcp any any eq 25 log remark Allow all other traffic permit ip any any</code>Then apply to the interface. Does that help?</body></body>

usuario0001 · ‎05-19-2009

Could you recommend me some documentation?

We want to block Peer to Peer, some Internet address etc.

Thanks and regards

Collin Clark · ‎05-19-2009

Configuring IP Access Lists

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

Two-Interface Router with NAT Cisco IOS Firewall Configuration

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a008009445f.shtml