router bypasses ACL for locally sourced traffic

From: Koen Zeilstra (koen@koenzeilstra.com)
Date: Fri Jun 30 2006 - 09:40:28 ART

Hi Group,

Maybe this has been posted before, however I could not find any reference.
Perhaps other wording is used to describe this.

What would is the explanation for a router bypassing ACL's applied in the
outgoing direction for locally source traffic?

For example:

(R1)e0/0------------e0/0(R2)

R1

int e0/0
  ip access-group ACL out
!

ip access-list ext ACL
  deny tcp any any eq telnet
  permit ip any any
!

Telnetting from R1 to R2 works fine even with the ACL denying outgoing
packets destined for port 23.

thanks,

Koen

-----------------------
You will feel hungry again in another hour.

This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:34 ART