Blocking websites with Pix 501

[konadu123]

I am using pix 501 for accessing the internet and i want to block certain web site (block outgoing an incoming traffic from a site).

My question is how can I get it done.

I tried the folling command but no success.

conduit deny tcp any host 198.104.132.81

conduit deny tcp any host 198.104.148.98

conduit deny tcp host 198.104.132.81 any

conduit deny tcp host 198.104.148.98 any

conduit deny tcp host 198.65.151.130 any

Any Idea?

Thanks.

[Patrick Iseli]

Forget about conduits, they are not supported any more, use access-lists instead !

Inbound traffic is never allowd if you do not have an access-list for inbound traffic on the outside interface.

To block outbound traffic use that:

access-list acl_inside deny ip any host 198.104.132.81

access-list acl_inside deny ip any host 198.104.148.98

access-list acl_inside permit ip any any

access-group acl_inside in interface inside

The other 3 lines does not make sense because this are host on the outside and not on the inside network.

Configuration examples:

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&s=Software_Configuration

sincerely

Patrick