Access-list Allow only one IP host into the firewall

[BabylonDrifter]

Hi

I was wanting to let a remote site into my network to access our intranet, can this be accomplished by using an access-list?

PIX 515 --os 5.2

This is my current setup, which will let anyone in on port 80.

access-list acl_out permit tcp any host 208.251.11.111 eq www

Is they a way to modify it to only allow a single IP (204.32.9.7) through the firewall to port 80?

Static routings are in place to hit the right server
static (inside,outside) 208.251.11.111 10.1.4.58 netmask 255.255.255.255 0 0

Thanks

Charles

 

[yizhar]

HI.

This should be simple:

no access-list acl_out
access-list acl_out permit tcp host 204.32.9.7 host 208.251.11.111 eq www
access-group acl_out in interface outside

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar