I am try to use IOS IDS version 12.2(16) for 3660. Configuration next:
ip audit attack action alarm drop reset
ip audit notify log
ip audit po max-events 100
ip audit smtp spam 350
ip audit name IDS-TTS info action alarm
ip audit name IDS-TTS attack action alarm drop reset
descr ### Internet connection ###
ip audit IDS-TTS in
i see some warnings about wrong ip packets, something about icmp, nothing terrible, but people outside can't connect to my web servers. If i try to do telnet from outside host to my webserver port 80 i see next:
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...