Acess list question ?

[jonks]

I have an 1600 series cisco router. Behind this sits a webserver that is hit from the outside world. In front of this we have a checkpoint firewall and then our internet connection. I created an acl on this router to restrict access to this network behind the cisco router. However i bit unsure how i am going to permit traffic coming from the outside world via the firewall as we dont know what address this may be.

FW---cisco--webserver.
acl

I hope this is not too confusing

 

[wybnormal]

Use an extended IP access list. You can filter on protocol or by port number.. ie.. port 80 ( http) for web traffic. You do not always need to know the IP for port filtering.

MikeS Find me at

http://www.packetattack.com

"Diplomacy; the art of saying 'nice doggie' till you can find a rock" Wynn Catlin

 

[jonks]

Thanks very much i have just solved my problem..
I like your website added it to favourites