On Sat, Jan 03, 2004 at 09:39:53PM -0500, Daniel Ouellet wrote: > ... > interface Serial0 > ... > ip access-group inbound in > ip access-group outbound out > ... > ip access-list extended inbound > .... > evaluate Firewall > deny ip any any > ... > ip access-list extended outbound > ... > permit ip xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy any reflect Firewall > deny ip any any > ... > > Where xxx is your IP subnet and yyy is your range > > The above will get you going really quickly... Yes, you can add some > rules for your servers, etc. But if you want to get yourselves up and > running in no time, that will do it and keep you safe as well. > > Just 4 lines to put in, or add if you do not already have it... Not bad > is it?
it's a very good reminder why we didn't model pf after cisco syntax, yes... -- http://2suck.net/hhwl.html - http://www.bsws.de/ Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
