Here is my Situation.
I followed the Cisco Docs about creating a firewall. I got the inspect rules in place and working but the access list is giving me a problem. When there is no access list applied to my outside WAN interface, I can view web sites. When I apply this access-list I can not.
Here is the access list:
10 permit tcp any host xxx.xxx.xxx.89 eq ftp 20 permit tcp any host xxx.xxx.xxx.89 eq ftp-data 30 permit tcp any host xxx.xxx.xxx.89 eq smtp 40 permit tcp any host xxx.xxx.xxx.89 eq www 50 permit tcp any host xxx.xxx.xxx.89 eq 3389 60 permit tcp any host xxx.xxx.xxx.89 eq pop3 70 permit tcp any host xxx.xxx.xxx.89 eq 1723 80 permit icmp any host xxx.xxx.xxx.89 echo 90 permit icmp any host xxx.xxx.xxx.89 echo-reply 100 deny ip any any 110 permit udp any host 207.178.224.89 eq domain
Here is the inspect rules:
ip inspect name firewall tcp ip inspect name firewall ftp ip inspect name firewall smtp ip inspect name firewall echo ip inspect name firewall icmp ip inspect name firewall pop3
I do not have a firewall monitoring the inside interface
any help would be appreciated