Access Lists Holding Connection

rodonohu1 · ‎11-17-2006

Hi,

I have an issue where a user account in windows logs off a server that is behind an access list. A scheduled job keeps sending emails from this server even though it was diconnected. I think its something on the Access lists. Is the any way i can check this on the Switch?

The ACL as below:

ip access-list extended vlan16in

permit ip host 172.17.4.64 host 172.17.16.5

permit ip host 172.17.4.66 host 172.17.16.5

permit ip host 172.17.4.79 host 172.17.16.5

permit icmp host 192.168.176.152 host 172.17.16.5 echo

permit ip host 172.17.4.50 host 172.17.16.5

permit ip host 172.17.4.51 host 172.17.16.5

permit ip host 172.17.4.89 host 172.17.16.5

permit tcp host 172.17.4.107 host 172.17.16.5

permit tcp host 172.17.10.66 host 172.17.16.5 established

permit udp host 192.168.241.228 host 172.17.16.5 eq snmp

permit icmp host 192.168.241.228 host 172.17.16.5 echo

permit tcp host 172.17.4.75 host 172.17.16.5

permit tcp host 172.17.4.60 eq www host 172.17.16.5

permit ip host 172.17.10.11 host 172.17.16.5

permit tcp host 172.17.4.132 host 172.17.16.5 established

permit ip host 172.17.4.59 host 172.17.16.5

permit icmp host 192.168.134.204 host 172.17.16.5 echo

permit ip host 172.17.4.142 host 172.17.16.5

permit ip host 172.17.4.132 host 172.17.16.5

permit ip host 172.17.4.137 host 172.17.16.5

Sureshdank · ‎11-19-2006

What series switch you are using, you can enable ip cache flow on the switch and you can check. And your switch is capable of Netflow then you can check by installing netflow tools.

HTH

Regards,

Suresh Jain