Not seeing a line denying tcp:80 means something very important.
Possibly post your access-list here, and give us a small diagram of
addressing. Are you using extended, or standard access-lists?
For example, a standard
access-list 1 permit ip 10.0.0.0 0.0.255.255
will permit anything from subnet 10.0., and deny EVERYTHING ELSE.
What I suspect is that you have an extended access-list, for example:
access-list 101 permit icmp 10.0.0.0 0.0.255.255 any
this will allow ICMP (ping, ping-reply) from 10.0., but DENY EVERYTHING
ELSE.
Remember with access-lists, your deny lines aren't all that is denied,
it is your PERMIT lines is ALL THAT IS ALLOWED. Just remember it this
way.. at the end of your lists, there is a :
access-list 101 deny ip any any
this matches any traffic that hasn't matched any other line, and DENIES
IT.
One other possibility, are you pinging via:
D:\> ping A.B.C.D
and browsing via:
http://A.B.C.D, or http://www.company.com ?
Also consider that possibly your DNS request to your DNS server is not
getting through, if you are not using http://A.B.C.D
Regards,
Trevor Corness, CCNA+ACRC
> "Deloso, Elmer G." wrote:
>
> Hi, all.
> If I can ping an IP address but can't access the site via browser, can
> you tell me where in the access-list this might be blocking the site?
> I can't find any entry that specifically denies www, and there is an
> entry "permit ip A.B.C.D"
>
> for that specific address. Do i need a separate entry to allow e-mail
> as well?Any help is greatly appreciated.
>
> Elmer Deloso
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
