From: Matt White (mwhite23@gmail.com)
Date: Thu Mar 03 2005 - 12:45:33 GMT-3
On Thu, 3 Mar 2005 10:43:15 -0500, Cisco certification
<ccielab@groupstudy.com> wrote:
> Hi,
>
> You have tried to post to a GroupStudy.com certification mailing list. Because
> the server does not recognize you as a confirmed poster, you will be required
> to authenticate that you are using a valid e-mail address and are not a
> spammer. By confirming this e-mail you certify that you are not sending
> Unsolicited Bulk Email (UBE).
>
> PLEASE DO NOT SEND YOUR ORIGINAL MESSAGE AGAIN! BY CONFIRMING THIS EMAIL
> YOUR ORIGINAL MESSAGE (WHICH IS NOW QUEUED IN THE SERVER) WILL BE POSTED.
>
> By confirming this e-mail you also certify the following:
>
> 1. The message does NOT break Cisco's Non-Disclosure requirements.
>
> 2. The message is NOT designed to advertise a commercial product.
>
> 3. You understand all postings become property of GroupStudy.com
>
> 4. You have searched the archives prior to posting.
>
> 5. The message is NOT inflammatory.
>
> 6. The message is NOT a test message.
>
> To confirm, simply reply to this message. No editing is necessary. Once
> confirmed, you will be able to post without additional confirmations.
>
> Welcome to GroupStudy.com!
>
> First time posters to GroupStudy.com are required to agree to the GroupStudy terms and conditions.
> Replying to this email, certifies you have read and agree to the GroupStudy posting guidelines and terms and conditions.
>
> --- Original Message Follows ---
>
> Date: Thu, 3 Mar 2005 10:43:05 -0500
> From: Matt White <mwhite23@gmail.com>
> To: ccielab@groupstudy.com
> Subject: Fragment control in access-lists.
>
> According to the example on the Doc CD (link below), that in order to
> deny fragments to, say, a web server, you initially need to deny
> fragments to everything then permit 80 in.
>
> Can someone explain why you cannot initially deny fragments to just
> port 80, or am I just completely off base here?
>
> Thanks.
>
> !
> access-list 101 deny ip any host 1.1.1.1 fragments
> access-list 101 permit tcp any host 1.1.1.1 eq 80
> access-list 101 deny ip any any
> !
>
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fipr_c/ipcprt1/1cfip.htm#1129413
This archive was generated by hypermail 2.1.4 : Sun Apr 03 2005 - 17:56:39 GMT-3