<div>
Your acl has a 10.x.x.x address when it is most likely configured as ip NAT outside<br />
what you need to do is either nat the 10.x.x.x address to a public IP or setup port forwarding to 3389 on the dialer0 interface if you do not have any public ips<br />

</div>


<div>
i already configured nat and port forwarding, up and running, but i cannot get my head around this problem. I am lright now ooking at the chance of any conflict with NAT. The key question is why it blocks all 3389 traffic, or is not able to route it to the LAN. <br />
<br />
Any suggestion directed to troubleshoot and find the problem will be very welcome.<br />
<br />

</div>


<div>
by the way, here is the running-conf for the problematic interface:<br />
<br />
interface Dialer0<br />
&nbsp;ip address negotiated<br />
&nbsp;ip access-group 101 in<br />
&nbsp;no ip redirects<br />
&nbsp;no ip unreachables<br />
&nbsp;no ip proxy-arp<br />
&nbsp;ip nat outside<br />
&nbsp;encapsulation ppp<br />
&nbsp;ip route-cache flow<br />
&nbsp;dialer pool 1<br />
&nbsp;dialer-group 1<br />
&nbsp;ppp authentication chap callin<br />
<br />
!<br />
ip classless<br />
ip route 0.0.0.0 0.0.0.0 Dialer0<br />
!<br />
ip http server<br />
ip http authentication local<br />
ip http timeout-policy idle 5 life 86400 requests 10000<br />
ip nat inside source list 1 interface Dialer0 overload<br />
ip nat inside source static tcp 10.0.0.253 3389 81.z.z.z 3389 extendable<br />
!<br />
logging trap debugging<br />
access-list 1 remark INSIDE_IF=FastEthernet0/0<br />
access-list 1 remark SDM_ACL Category=2<br />
access-list 1 permit 10.0.0.0 0.255.255.255<br />
access-list 101 permit tcp host 81.x.x.x eq 3389 host 10.0.0.253 eq 3389<br />
access-list 101 deny &nbsp; tcp any any eq 3389<br />
access-list 101 permit ip any any<br />
dialer-list 1 protocol ip permit<br />
<br />
no cdp run<br />
!<br />
<br />
thanks
</div>


<div>
that was great clokendagger, today i learnt something very important.<br />
Really appreciate it
</div>


<div>
<div class="content wysiwyg-content">
Hi everyone,<br />
Have a problem here implementing this ACL :<br />
&nbsp; &nbsp; 10 permit tcp host 81.x.x.x host 10.0.0.253 eq 3389<br />
&nbsp; &nbsp; 20 deny tcp any any eq 3389<br />
&nbsp; &nbsp; 30 permit ip any any <br />
<br />
in the DIALER0 interface on a CISCO 1841. <br />
&nbsp; &nbsp; ip access-group 101 in<br />
<br />
when i tried to connect from the remote network it wont allow me. If i implement this very same ACL USING OUT in the FASTETHERNET it will work as wished, but no in the DIALER0, and that is my question:<br />
WHY ????, why (apparently) blocks all IPs and cannot get through<br />
<br />
i have no other ACL in the router and NAT is configured and working perfectly, but please help me to understand why it doesn't work in that interface.<br />
<br />
Thank y ou very much and hope you find this question easy
</div>
</div>


Hi everyone,
Have a problem here implementing this ACL :
    10 permit tcp host 81.x.x.x host 10.0.0.253 eq 3389
    20 deny tcp any any eq 3389
    30 permit ip any any 

in the DIALER0 interface on a CISCO 1841. 
    ip access-group 101 in

when i tried to connect from the remote network it wont allow me. If i implement this very same ACL USING OUT in the FASTETHERNET it will work as wished, but no in the DIALER0, and that is my question:
WHY ????, why (apparently) blocks all IPs and cannot get through

i have no other ACL in the router and NAT is configured and working perfectly, but please help me to understand why it doesn't work in that interface.

Thank y ou very much and hope you find this question easy

ACL problem in DIALER interface

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Network Operations includes asset management, help-desk supervision, security and user policies, infrastructure administration and anything else that affects the operation of your network. Discussions will include those of best practices in platforms, configurations, performance, security and accounting.