access control list

[vinguy51]

hai...
actually i am an network engineer from india ....we are having 1600 cisco router and 2 mbps leasedline with us.the thing is that I would like to allow only web traffic, mail traffic ,ftp traffic for my network from internet.and the same traffics has to go to the internet from my network.

for this can we use access control list configuration...(using layer 4 portnumbers and layer 3 addresses)....

if yes means what are the port numbers that i have to allow and the port numbers that i have to deny. kindly help me in this issue...

thanks in advanz..

[Lyte]

Oh... I need to learn more about networking!

I hope there's someone here that can help you!!!

Lyte

[Mike Livsey]

I suggest that you just use a deny all policy and add the relevent subnets that apply to your country as allow.

You can get this info fairly freely and a deny: allow system is obviously a better option for you as the potential deny traffic density is greater than the allowed traffic.

Cisco can aid you in your specific configuration needs, give them a call or check out their website.

[Lyte]

Thanks Mike!

I don't know diddley about networking... but I'm learning!

Lyte