Access list help!

[dan_track]

Hi

Could someone please explain the following. I just need to double check my explanation of the following:

access-list acl_dmz3 permit icmp any any

access-list acl_dmz3 permit udp any any eq domain

access-list acl_dmz3 permit udp any any eq ntp

access-list acl_dmz3 permit tcp any any

Thanks

Dan

[ankurbhasin]

Hi DAN,

This ACL will permit all icmp traffic,permit all tcp traffic and permit UDP traffic only for NTP and DNS from any source to any destination and will implicit deny rest of the traffic.

HTH, if yes please rate the post.

Ankur

[dan_track]

Hi

Thanks for the info. It was what I thought.

Since this is a dmz shouldn't I drop the tcp access and only allow certain ports to be open to the internet?

Otherwise I'm happy with your answer to my initial question

Thanks

Dan

[dan_track]

Hi

Does source mean from external or can source mean from internal host in dmz zone?

Thanks

Dan

[sean]

Depends on where the acl is applied and the direction it is applied in.