Re: [FW-1] Split / Encrypted DNS (SecuRemote)

[PENDO MTEGHA <saman@FW1-NOSPAMGLOBEMW.NET>]

hi

i am trying to implement access-list to restrict internet access for
speciffic host like this .after apply ip access group no body cant access
internet .plese advise me how i do ti?

access-list 105 deny tcp host a.b.c.d any eq www
access-list 105 permit ip any any

for interface eth

ip access-group 105 out

currently i am using wccp  with my cisco 507 cdn.and also i try like this

access-list 101 permit tcp host a.b.c.d any eq 25
access-list 101 permit tcp host a.b.c.d any eq 110
access-list 101 deny ip any any

plese try to advise me as well.i appriciate your grate help


saman

----- Original Message -----
From: Jesus Calvo Hernandez <jesus.calvo@SEMA.ES>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Saturday, December 01, 2001 1:44 PM
Subject: Re: [FW-1] Split / Encrypted DNS (SecuRemote)


> Hi
>
> just one question:
>
> what happens when you update the site?
>
> As far as I know these two lines are lost as the userc.C is overwriten,
> so you are in the beginning again
>
> thanks to all  and regards
>
>
>
> ----- Original Message -----
> From: Chris H <cghoerichs@YAHOO.COM>
> Date: Friday, November 30, 2001 5:31 pm
> Subject: Re: [FW-1] Split / Encrypted DNS (SecuRemote)
>
> > Yes
> > Did you add the :dns_xlate (true)
> >                :dns_encrypt (true)
> >
> > to your userc.C file?
> >
> > --- "Johnson, Doug (ISS Atlanta)" <DJohnson@ISS.NET>
> > wrote:
> > > I'm working on setting up Encrypted DNS for
> > > SecuRemote in preparation for
> > > setting up Split DNS.  However, I haven't had any
> > > success so far.  I don't
> > > see any domain-udp decryptions showing up in my log
> > > viewer, so I'm guessing
> > > there is a problem with the encryption (or lack
> > > thereof) on the client side.
> > >
> > > Has anyone else had any success?
> > >
> > > Doug Johnson
> > > Internet Security Systems
> > > Sr. Network Engineer
> > > <mailto:djohnson@iss.net>
> > > <" target="l">http://www.iss.net/>
> > >
> > > ===============================================
> > > To unsubscribe from this mailing list,
> > > please see the instructions at
> > > http://www.checkpoint.com/services/mailing.html
> > > ===============================================
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
> > http://geocities.yahoo.com/ps/info1
> >
> > ===============================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > ===============================================
> >
>
> ------------------------------------------------------------------
> This email is confidential and intended solely for the use of the
individual to whom it is addressed. Any views or opinions presented are
solely those of the author and do not necessarily represent those of
SchlumbergerSema.
> If you are not the intended recipient, be advised that you have received
this email in error and that any use, dissemination, forwarding, printing,
or copying of this email is strictly prohibited.
> ------------------------------------------------------------------
>
> ===============================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================