denying all from inside to outside on PIX 525 v.6.01

[mbettis]

How do you deny everything on the inside interface on a PIX 525? I want to open only a few "doors".

Any help greatly appreciated.

Thanks,

Matt

[rrbleeker]

Use and access control list and apply this list to the internal interface. The access list should state the traffic you do allow first. An implicit deny any statement is already in place

[smalkeric]

I usually just setup my NAT to allow only the hosts I want to go out in a very controlled environment. For instance, if I only want to allow say 10 users out at all, I won’t use a nat or global statement at all. Just statics for those machines. IfI need to be further restrictive, I use access-lists from there.