Re: Cisco Access Lists (Was: RE: Content Analysis)

[Eric Johnson]

On 9 Mar 00, at 15:24, John Adams wrote:

> Here's my ruleset:
> 
> ip access-list extended s0-in
> 
> ! block IP spoofing 
> ...
>  deny   ip 192.168.0.0 0.0.255.255 any log
>  permit tcp any any lt 1024 established

Wouldn't locating the permit any established at the start of the list 
be far more efficient?

Eric Johnson
-------------------

Eric Johnson
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]