Egress filtering --> Can someone help me set this up

[ForumKid]

My inside network is 10.0.0.0,
dmz server is 192.168.100.2

How to filter egress traffic. I have been reading a lot on this and im a bit confused on what addresses to use in my access list. To implement egress filtering, my security book says make sure the outgoing traffic has come from a valid inside network.

Maybe someone can shed some light on this for me. I would appreciate it.
Also, do i filter egress traffic on both the inside interface and the dmz interface?

Thanks

 

[Yates76]

Good question. Let me take a stab at some of it.

Since your DMZ is of a higher security rating than your outside interface, any rules that the outside interface has should trickle up to the DMZ and inside.

If you use access-list commands to shut out specific IP addresses, then anything headed out will be shut out.

Now, as far as I understand it (and I am learning, too), if you wish to deny parts of the DMZ to inside traffic, that's another story.

Good luck!

J.