Cisco 2501 Outbound ACL

[ljz1]

I have a Cisco 2501. No one behind the firewall can load certain embedded links in web browsers ie.

http://www.downstreammedia.net/TheRangeLife/PhotoHoldem/Round2/NathanSilsbee2.jpg

There is no outbound ACL applied to any interface could this be the issue? If there is no outbound ACL is that an implicent deny or is the just an implicit deny at the end of every ACL?

I am attaching the config also:

User Access Verification

Password:
Router>enable
Password:
Router#show run
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable secret 5 $1$0DwV$eZkP82kL.f3ln05Zy09lU0
enable password
!
ip subnet-zero
ip name-server 170.147.45.175
ip name-server 170.147.113.54
!
!
!
interface Ethernet0
description LAN
ip address 64.x.x.x 255.255.255.224
no ip directed-broadcast
no cdp enable
!
interface Serial0
description ICG T1
ip address 64.140.x.x 255.255.255.252
ip access-group 102 in
no ip directed-broadcast
encapsulation ppp
no ip route-cache
no ip mroute-cache
no fair-queue
no cdp enable
!
interface Serial1
no ip address
no ip directed-broadcast
shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
!
access-list 102 permit esp any any
access-list 102 permit icmp any any
access-list 102 permit gre any any
access-list 102 permit udp any any eq isakmp
access-list 102 permit udp any any eq 50
access-list 102 permit tcp any any eq 50
access-list 102 permit tcp any any eq 500
access-list 102 permit tcp any any eq 6111
access-list 102 permit tcp any any range 1024 1432
access-list 102 permit udp any any range 1024 1432
access-list 102 permit tcp any any gt 1434
access-list 102 permit udp any any gt 1434
snmp-server community public RO
!
line con 0
transport input none
line aux 0
session-timeout 60
exec-timeout 30 0
password dan22dan
login
line vty 0 4
password
login
!
end

Any insight very much appreciated!

Laurie

 

[vipergg]

Just an implicit deny at the end of an ACL . If its not applied to an interface "in or out" , traffic is wide open .

 

[globalchicken]

Traffic will work 2 ways. The web server sending its information, pc receiving its information and vice versa. Whatever you are not allowing inbound is being denied. Possibly there will have to be another permit statement on your inbound ACL 102 that will permit what is not being allowed...

 

[ljz1]

Great, thanks, I'll try to figure out what service is being denied back in.

I appreciate it.