topic Re: Help with IOS Firewall in Network Security

Help with IOS Firewall

usuario0001 — Mon, 11 Mar 2019 15:32:26 GMT

Hi all,

I'm trying to use IOS Firewall on a 2811 router. I use 2 interfaces F0/0 as a WAN interface to internet and VLAN1 as a LAN interface.

This is the configuration I'm trying:

ip inspect name Firewall pop3

ip inspect name Firewall imap3

interface vlan1

ip inspect Firewall in

I understand that with this configuration I couldn't be able to connect to http, but I can do it from my LAN.

Can anybody help me? I just want to restrict the use of some protocols.

Regards

Re: Help with IOS Firewall

Collin Clark — Thu, 14 May 2009 16:03:23 GMT

ACL's block/permit traffic and inspect keeps trsck of TCP sessions. What exactly are you trying to do?

Re: Help with IOS Firewall

usuario0001 — Thu, 14 May 2009 16:13:05 GMT

I want to block some protocols.

Thanks

Re: Help with IOS Firewall

Collin Clark — Thu, 14 May 2009 16:30:48 GMT

OK, Let's say you want to block SMTP for everyone but the mail server.

<code> ip access-list extended BLOCK_SMTP remark Allow EMail server SMTP permit tcp host 192.168.1.10 any eq 25 remark Block ALL SMTP deny tcp any any eq 25 log remark Allow all other traffic permit ip any any</code>Then apply to the interface. Does that help?</body></body>

Re: Help with IOS Firewall

usuario0001 — Tue, 19 May 2009 15:49:38 GMT

Could you recommend me some documentation?

We want to block Peer to Peer, some Internet address etc.

Thanks and regards

Re: Help with IOS Firewall

Collin Clark — Tue, 19 May 2009 15:56:35 GMT

Configuring IP Access Lists

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

Two-Interface Router with NAT Cisco IOS Firewall Configuration

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a008009445f.shtml