ASA Fireewall commands

[Lake]

Hi Guys,

Can someone please explain to me what these commands mean on a Cisco ASA Firewall. Any help would be greatly appreciated.

access-list sfr_redirect extended deny ip host 192.1.1.20 host 44.11.15.66
access-list sfr_redirect extended deny ip any host 44.11.15.66
access-list sfr_redirect extended permit ip any any

Thanks,

Lake

[Bogdan Nita]

Well, the commands you posted are just a access-list that denies traffic from to 44.11.15.66 and allows everything else. The access-list by itself will have no impact on the config, for that it will have to be applied somewhere.

Judging by the name of the access-list I will presume it is being used to select the traffic being sent to the source fire module. If that is the case all traffic is sent to the sfr except traffic to 44.11.15.66.

[Lake]

Thank you very much.