Re: IP Inspect name NO-JAVA http java-list 1

From: Gary Duncanson (gary.duncanson@googlemail.com)
Date: Fri Dec 07 2007 - 08:22:08 ART


Should that not be

int Serial 0/0
> descr Link to Internet
> ip inspect NO-JAVA in
----- Original Message -----
From: <v.shekhar@yahoo.com>
To: "Mike Stout" <michaelgstout@gmail.com>; <ccielab@groupstudy.com>
Sent: Friday, December 07, 2007 8:57 AM
Subject: Re: IP Inspect name NO-JAVA http java-list 1

> Looks fine to me.
>
> Thanks,
> -sHekHar.
> CCIE#17589/CISSP/RHCE.
>
> ----- Original Message ----
> From: Mike Stout <michaelgstout@gmail.com>
> To: ccielab@groupstudy.com
> Sent: Friday, December 7, 2007 5:00:16 AM
> Subject: IP Inspect name NO-JAVA http java-list 1
>
>
> Hello:
> Can anybody tell me if this is a correct config to protect the Ethernet
> LAN
> from
>
> receiving JAVA APPLETS from the internet which is connected to my
> serial
>
> interface??
>
> Router
> ip inspect name NO-JAVA http java-list 1
> access-list 1 deny any
> !
> interface Ethernet0/0
> descr Corp LAN
> !
> int Serial 0/0
> descr Link to Internet
> ip inspect NO-JAVA out
>
> Please notice, ther is no ip access-group configured on the Ethernet or
> Serial.
>
> Thank You
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
> ____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue Jan 01 2008 - 12:04:29 ARST