Glad to hear you got it working. You can permit that address before the deny statement to allow them through. In your example, you could do:
ip access-list ext BLOCK_RDP
1 permit tcp host 105.103.24.110 105.103.28.0 0.0.0.255 eq 3389
2 permit tcp host 105.103.24.110 host 105.103.28.33 eq 3389
The line numbers are there because by default Cisco starts with 10. To insert a line where you want, you add the number. Line 1 will allow 105.103.24.110 to access anything int the 105.103.28.0/24 subnet, and line 2 will allow the same host to access ONLY 105.103.28.33 on that subnet connecting to RDP.
When you insert lines like this, it doesn't affect the existing traffic, and you don't have to remove the acl from the interface in order to modify it. So, in my example, you can insert the lines and when you look at your access-list, you would see:
ip access-list ext BLOCK_RDP
1 permit tcp host 105.103.24.110 105.103.28.0 0.0.0.255 eq 3389
2 permit tcp host 105.103.24.110 host 105.103.28.33 eq 3389
10 deny tcp any any eq 3389
20 permit ip any any
Make sense?
HTH,
John
*** Please rate all useful posts ***
HTH,
John
*** Please rate all useful posts ***
