Say i have an access-list called access_out. I only want 80 outbound

[ForumKid]

what would be the syntax to only allow outbound port 80 traffic.
access-list access_out permit ip any host x.x.x.x eq www
...I think thats the syntax i have.....
This only allows inbound port 80 traffic. Now how do I add to this access list that only port 80 is allowed outbound. All other outbound requests should be denyed.

Thanks

 

[xlee]

Try changing your access-list to:
access-list access_out permit tcp any any eq www

To apply to an interface:
access-group access_out in interface inside

 

[Guest_imported]

IP is a layer 3 (network) protocol and doesn't support the concept of ports.
You need to specify a layer 4 (transport) protocol (e.g. TCP, UDP) if you wish to specify ports.

 

[dchp]

You might want to consider allowing 443 out as well(tcp secure sockets). That way, when someone tries to check their bank account, you will not get a call.

 

[havanajoe]

Don't forget to allow smtp and dns through as well.