Reflexive output ACL

From: hadek.el-ayachi@nsn.com
Date: Thu Nov 08 2007 - 13:46:57 ART

Next message: Vaibhav Sharma: "Re: Need help, 2621 router showing special characters"
Previous message: Farrukh Haroon: "Re: Need help, 2621 router showing special characters"
Next in thread: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: Guyler, Rik: "RE: Reflexive output ACL"
Maybe reply: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: William Nellis: "Re: Reflexive output ACL"
Maybe reply: Guyler, Rik: "RE: Reflexive output ACL"
Maybe reply: Joseph Brunner: "RE: Reflexive output ACL"
Maybe reply: hadek.el-ayachi@nsn.com: "RE: Reflexive output ACL"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi GS,
If I am asked to permit only icmp/udp/tcp traffic inbound if it is
initiated from inside, the answer is:
       ip access-list ext FW_OUT
                   permit icmp an an reflect FW
                   permit tcp an an reflect FW
                   permit udp an an reflect FW

But, what about other protocols and futur protocols sach as igmp,
gre...? Should I add per ip any any? Does it deserve askin proctor?
Thanks for comment

E. HADEK
Nokia Siemens Networks
IP Core planner
5 rue Abou Inane- Hassan
Rabat - Maroc
Tel : +212 37 26 15 30
GSM : + 212 61 44 93 98

Next message: Vaibhav Sharma: "Re: Need help, 2621 router showing special characters"
Previous message: Farrukh Haroon: "Re: Need help, 2621 router showing special characters"
Next in thread: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: Guyler, Rik: "RE: Reflexive output ACL"
Maybe reply: Tarun Pahuja: "Re: Reflexive output ACL"
Maybe reply: William Nellis: "Re: Reflexive output ACL"
Maybe reply: Guyler, Rik: "RE: Reflexive output ACL"
Maybe reply: Joseph Brunner: "RE: Reflexive output ACL"
Maybe reply: hadek.el-ayachi@nsn.com: "RE: Reflexive output ACL"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:28 ART