internet access

[carl_townshend]

Can anyone please tell me what ports I need to allow inbound from the internet to allow internet access, would it mainly just be let anything on port 80 inbound ?

[Patrick Laidlaw]

Carl this is a little vague what are you using to access the internet and we can help you from there. If it's a pix you should just allow outbound access if its a router you'll have to do a little more with the access-lists to keep a record of outbound traffic.

Patrick

[jackko]

providing you are referring a pix or a router with firewall feature set (cbac) configured, then no inbound acl is required for internal user to access the internet. the reason being the pix or cbac is capable to permit the so-called return traffic.

assuming you are referring to a router with no firewall feature set but there is an existing inbound acl. then you may need to permit this by permitted any with source port tcp 80. but this is extremely risky.