<div>
Thanks for the help. &nbsp;You guys are great! &nbsp;
</div>


Thanks for the help.  You guys are great!  

<div>
<div class="content wysiwyg-content">
Below is an access list from a security book I am reading, <br />
<br />
access-list 110 deny tcp any any established<br />
access-list 110 permit tcp any any<br />
<br />
interface s0<br />
access-group 110 in &nbsp;(this is the Internet interface)<br />
<br />
<br />
If I want to deny incoming tcp traffic other than for established sessions should the access be as follows?<br />
<br />
access-list 110 permit tcp any any established<br />
<br />
interface s0<br />
access-group 110 in<br />
<br />
It seems to me the first access list will deny the returning packets and since a ACL will deny by default, why do I need the 'deny' at all in the first list?<br />
<br />
Thanks,<br />
Jerri
</div>
</div>


Below is an access list from a security book I am reading, 

access-list 110 deny tcp any any established
access-list 110 permit tcp any any

interface s0
access-group 110 in  (this is the Internet interface)


If I want to deny incoming tcp traffic other than for established sessions should the access be as follows?

access-list 110 permit tcp any any established

interface s0
access-group 110 in

It seems to me the first access list will deny the returning packets and since a ACL will deny by default, why do I need the 'deny' at all in the first list?

Thanks,
Jerri

Cisco ACL's example to deny incoming SYN packets from outside network (Internet)

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.