Fw: weird question about tftp and access-list

From: James (kang_z@hotmail.com)
Date: Sun Oct 13 2002 - 15:19:54 GMT-3


----- Original Message -----
From: James
To: ccielab@groupstudy.com
Sent: Sunday, October 13, 2002 2:09 PM
Subject: weird question about tftp and access-list

hi, all
i am trying to permit tftp packet out of ether 0.
tftp srv---------(e0)r4(s0)--------(s0)r3(e0)-----cleint
i can copy files to tftp server from client without any access-list. but after
applying the access-list as following, i got some error message: !.....
%Error writing tftp://192.168.0.188/r22 (Write error)...... that means, the
first packet is permit, but the subsequent is block. i am wondering what is
the real reason.
thanks in advance
access-list is as following:
 permit ospf any any (234 matches)
    permit tcp 172.16.21.0 0.0.0.255 any eq telnet
    permit icmp any any echo log (20 matches)
    permit icmp any any echo-reply log (5 matches)
    permit udp any any eq tftp log (3 matches)
the log message is : 04:31:12: %SEC-6-IPACCESSLOGP: list allow_ftp_ping
permitted udp 172.16.37.2(549
49) -> 192.168.0.188(69), 1 packet
james



This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:46 GMT-3