equivalent commands on ver6.3 and 8.0

[Gerard Gacusan]

please correct my if I'm wrong with these old 6.3 command statements to a ver8.0

Version 6.3

conduit deny tcp any eq 1434 any

conduit deny udp any eq 1434 any

Version 8.0

access-list outside deny tcp any any eq 1434

access-list outside deny udp any any eq 1434

or, does an implicit deny statements is on the end of the access-list? no need to add deny statements?

[alanajjar]

Hi,

The commands here are identical. the source and destination in the conduit is in swaped order of the access list.

Of cource there is an implicit deny statement, but if you want to deny access to specific hosts or services, you have to put these deny statements at the begining of the access list, to ensure that the access to these services are denied.

regards