Windowsupdate not working with acl

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-17-2010 03:41 AM - edited 03-06-2019 12:31 PM
Hi,
We have a vlan that we protect from inbound traffic:
10 permit tcp any any established (189 matches)
20 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq 554
30 permit udp any xxx.xxx.xxx.xxx 0.0.0.1 eq 5004
40 permit udp any xxx.xxx.xxx.xxx 0.0.0.1 eq 5005
50 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq 1755
60 permit udp any xxx.xxx.xxx.xxx 0.0.0.1 eq 1755
70 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq www
80 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq 8080
90 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq 443
100 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq ftp
110 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 eq ftp-data
120 permit tcp any xxx.xxx.xxx.xxx 0.0.0.1 gt 1024
130 permit tcp xxx.xxx.xxx.xxx 0.0.3.255 xxx.xxx.xxx.xxx 0.0.0.1 eq 3389
140 permit udp xxx.xxx.xxx.xxx 0.0.3.255 xxx.xxx.xxx.xxx 0.0.0.1 eq 3389
150 deny ip any any (948 matches)
Why does windowsupdate not work? The established statement should work...
thx,
Marc
- Labels:
-
Other Switching
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-17-2010 03:55 AM
MSN site have issues with fragmentation and paket sizes.
Try configuring and checking on your WAN interface :
adjust tcp mss
HTH
Regards,
Smitesh
