Re: PIX - acl breaks implicit outbound rule

["Paul Melson" <pmelson () gmail com>]

> However, it replaces the implicit outbound rule for Interface2 and breaks
all other outbound traffic on 
> the interface.  My question is, what can I append to the above access
group to put the outbound rule 
> back in? 

As far as I know, you can't.  You will need to explicitly declare the
previously implied rule:

access-list Interface2toInterface1 deny ip 10.0.5.0 netmask 255.255.255.0
10.0.0.0 255.0.0.0 any
access-list Interface2toInterface1 permit ip 10.0.5.0 netmask 255.255.255.0
any


PaulM

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards