I think you need to include this test condition - permit tcp any any eq 80.
cheekin
----- Original Message -----
From: "John Brandis"
To:
Sent: Tuesday, June 26, 2001 16:26
Subject: Access list problem [7:9939]
> Hi All,
>
> I thought I was on top of access lists, until today. When ever I apply
> this particualr access list in IOS 11.2 , nothing on the network can
> view internet pages. They can ping no problem but nothing else. Please
> advise if you can, on which line the error is.
> Thanks all, I appreciate it.
>
> Extended IP access list 110
> deny tcp any any eq 139
> permit udp any any eq domain
> permit tcp any any eq domain
> permit icmp any any
> permit tcp any host 203.111.42.200 eq ftp-data
> permit tcp any host 203.111.42.200 eq ftp
> permit tcp any host 203.111.42.200 eq 22
> permit tcp any host 203.111.42.204 eq ftp-data
> permit tcp any host 203.111.42.204 eq ftp
> permit tcp any host 203.111.42.204 eq www
> permit tcp any host 203.111.42.204 eq 3389
> permit tcp any host 203.111.42.215 eq smtp
> permit tcp any host 203.111.42.215 eq www
> permit tcp any host 203.111.42.215 eq 3389
> permit ip host 203.111.42.224 any
> permit ip host 203.111.42.225 any
> permit ip host 203.111.42.226 any
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=9947&t=9939
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
