Hi Thaier,
line 1 permits all DNS Zone transfer for anybody.
line 2 permits all FTP control data for anybody.
line 3 permits all FTP traffic for anybody.
Where have you applied this rule ? The any any statement could be depending on which interface this access-list is applied dangerous.
1.) After the last permit line will follow a deny any any. Note: You cannot see this line !
2.) This lines permits any ftp, ftpdata and zone transfer to all higher security interfaces.
security level outside = 0
security level dmz = 50
security level inside = 100
Example: this access-list would be on the outside interface. Then all internet users can access the protocols open in the access-list. But the internet users just can accees the hosts that have a valid NAT configuration. Note, that you need a static for that.
sincerely
Patrick
