PIX: Confused about the from / to aspect of access list syntax

Sep 06, 2006 2 Replies

Rate this thread:

barret bonden 19 years ago

Confused about the from / to aspect of access list syntax

Cisco's docs say :

access-list acl_name [deny | permit] protocol source source_netmask destination destination_netmask

but I'm used to seeing configs with

static(inside,outside) xx.xx.xx.41 xx.xx.xx.11 netmask 255.255.255.255

access-list outside extended permit tcp any host xx.xx.xx.41 eq www

if the 241 is the outside we are letting into a webserver shouldn't the access list syntax use the destination (the web server) as the last ip address in it's statement ?

As in access-list outside extended permit tcp any host xx.xx.xx.11 eq www

Vote

Walter Roberson 19 years ago

Please see my slightler earlier posting,

formatting link

Vote

chris 19 years ago

access-list acl_name [deny | permit] eg. access-list outside

[deny | permit] protocol eg. permit tcp

source source_netmask eg. any

destination destination_netmask eg. host xx.xx.xx.11

eq www

"shouldn't the access list syntax use the destination (the web server) as the last ip address in it's statement"

It does. It says let "any" (source) access "host xx.xx.xx.41" (the destination). What bit do you not understand?

Chris.

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required