Attached is the topology.
I am getting Type-5 AS External Link States into my network (area 1) and I tried distribute-list out <interface>, but it's not allowing me with <interface> and without interface command it's not resolved. I can see those routes in ASA. I tried distribute-in and out both on internal router (R3) but no help.
I want few routes of Type-5 LSA's to stop to coming on R3 as well as FW. After applying distribut-list in, those routes are not visible in sh ip route.
But in sh ip ospf database, i can see those routes.
Pls. suggest how this can be acheive.