PIX ACCESS LISTS

[jimyuk]

Hi we have a PIX 501 firewall and i wish to block some websites like hotmail, Yahoo, MSN
Please can someone tell me the commands that will enable me to achieve this, i have spent sometime try'in some access-list configurations but with no sucsess..

Cheers

 

[themut]

Here´s a link with the access list command syntax and explanation with samples:

http://cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/ab.htm#1067755

 

[dopehead]

Specifically you would use something like :

access-list acl_outgoing deny tcp <lan subnet> <lan mask> host <ip of website> eq 80
#just repeat this line and exchange the ip of the website.
access-list acl_outgoing permit ip <lan subnet> <lan mask> any

access-group acl_ougoing in interface inside


Jan

Network Systems Engineer
CCNA/CQS