NEW access-list configuration configuration of Cisco 2621 router

[ntbuddy]

How would I do the following objectives?

1. Allow

http://www to

a specific 12.107.167.xxx address
2. Allow mail (smtp and pop3) to a specific 12.107.167.xxx address
3. Allow DNS to a specific 12.107.167.xxx address

Objectives:
1. Individuals from the Internet can access www, mail and DNS.
2. All internal users can see everything and surf the internet freely.

Configuration
E0 - Actual Internet IP Addresses (12.107.167.xxx 255.255.255.192)
E1 - Internal (10.1.3.xxx) Addresses
S0 - IP to the Internet

Our system uses a Cisco 2621 with the IOS firewall software.

Thank you, John

 

[stoney66]

Are you just wanting to setup extended acls to allow this specific traffic inbound?

IF thats the case, i usually run the established command on the first acl, that allows anything internal to return if it was established from the inside, then add the permits to your server eq dns/

http://www/mail.

stoney