you have to have permit any any after your last line.  At present your access list will deny everything.
-----Original Message-----
From: tselvan [mailto:[EMAIL PROTECTED]]
Sent: 13 July 2000 12:53
To: group study
Cc: KV Ramesh Babu; cisco
Subject: filtering web sites for users

hi,
 
    we r using cisco 1720 router connected to isp thru a serial interface.
 
router is  inturn connected to an ethernet interface to serve the users.
we  want to filter certain web sites like mp3.com, yahoo.com as we r using the leased line for office use.
we have tried out the following using access-list:
 
 access-list  100 deny tcp 63.241.16.56 0.0.0.0 192.168.1.0 0.0.0.255
 
  63.241.16.56 - for mp3.com
 
 192.168.1.0-  for user network.
 
when we tried out this  users were unable to browse.
 
pl suggest for an alternate access control list.
 
beno
 

Reply via email to