router bypasses ACL for locally sourced traffic
Hi Group,
Maybe this has been posted before, however I could not find any reference. Perhaps other wording is used to describe this.
What would is the explanation for a router bypassing ACL’s applied in the outgoing direction for locally source traffic?
For example:
(R1)e0/0————e0/0(R2)
R1
int e0/0 ip access-group ACL out !
ip access-list ext ACL deny tcp any any eq telnet permit ip any any !
Telnetting from R1 to R2 works fine even with the ACL denying outgoing packets destined for port 23.
thanks,
Koen
———————– You will feel hungry again in another hour.
























