ASA 8.4 Access-List Help

[wolfunr04]

Hello, I am working on an ASA 5510 on 8.4 IOS and need to know how to limit icmp to just a single host? What I would like to do is be able to PING from the Inside interface 10.X.X.X to host 4.2.2.2 on the Outside, but thats it no other host would be PINGable.

I tried MANY different access-list statements but the only way I can get icmp out and working is using the "fixup protocol icmp" but then everything is PINGable and the ASA does not block anything.

Any help would be great!!!

Thanks!

[Julio Carvajal · Accepted solution]

Hello Scott,

Do fixup protocol icmp

access-list inside_in permit icmp host 10.x.x.x host 4.2.2.2

access-list inside_in deny icmp any any

access-list inside_in permit ip any any

access-group inside_in in interface inside

Regards,

[wolfunr04]

You are great! Thanks so much!!!!!!!!!

[Julio Carvajal]

Hey Scott a pleasure to help

Regards,

Julio