Basic Firewall Question

Sep 16, 2006 2 Replies

I'm not completely familiar with how ACLs work in conjunction with the firewall, so I have a basic questions whic should answer what I need to know.



Here's the configuration:



Remote Host=====1811 Router=======Internal Server



FE0 is hooked up to ISP Internal network is VLAN1 Internal server is on VLAN1



Internal server has public IP of 1.2.3.4 and internal ip of 10.9.8.7 using static NAT.



How can I block inbound access to a single port (say 1433, for example) originating from a remote host (ie any internet machine) to that internal server and then allow all other traffic?



I'm trying to block a specific set of ports on FE0 but want to allow everything else to flow freely.



access-list 101 deny tcp any host 1.2.3.4 eq 1433 access-list 101 permit any

Or udp or ip replacing tcp above. For a range say "range 1433 1455"

int fe0 ip access-group 101 in ...

alan

Thanks. That's exactly what I needed to know. I basically just needed to know the general syntax.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required