[afnog] Web access blocking

[Moussa BAGAYOKO]

Hi Mark, Hi all

May be my mails or its object didn't traduce what I want to tell: I want to
block Internet web access (not web access in DMZ) for some of my networks
behind pix-525inside interface. So in in my DMZ I've not server. 
 
Regards

 
Moussa K BAGAYOKO
Cadre Informaticien
Banque de Développement du Mali
Av Modibo KEITA  Bamako MALI
Tel: +223 222 31 84
      +233 630 40 53

> -----Message d'origine-----
> De : Michuki Mwangi [mailto:michuki at swiftkenya.com]
> Envoyé : vendredi 13 mai 2005 12:14
> À : Moussa BAGAYOKO
> Objet : RE: [afnog] Web access blocking
> 
> On Fri, 2005-05-13 at 13:35, Moussa BAGAYOKO wrote:
> 
> > names
> > name 111.2222.333.0 myname
> >
> > access-list inside_access_in deny tcp myname 255.255.255.0 any eq www
> >
> >
> 
> Please verify since am not certain.
> 
> You may wish to add a specific line permitting access to your DMZ block
> before the explicit deny
> 
> e.g
> 
> access-list inside_access_in permit tcp myname 255.255.255.0 x.x.x.x
> 255.255.x.x eq www
> access-list inside_access_in deny tcp myname 255.255.255.0 any eq www
> 
> 
> 
> Regards,
> 
> 
> 
> 
> 
> 
> --
> Michuki Mwangi
> KENIC.