Apache and CISCO ACL ?

Ammad · 11-02-2008, 01:47 AM

Dear All,

is there difference between apache 80 and IIS 80 port, i have two webservers, one 172.16.10.45 (Windows IIS) and 172.16.10.46 (Xampp Windows). when i enable ACL on cisco and limit 192.168.81/24 to only access web ports. after ACL on cisco i can access IIS, but Apache system is not accessable. both IIS and Apache are running on 80. when i remove the ACL from interface, i can browse the website. strange behaviour.

Code:

ip access-list extended webout
 permit tcp any 192.168.81.0 0.0.0.255 established
 permit tcp 192.168.81.0 0.0.0.255 host 172.16.10.45 eq www
 permit tcp 192.168.81.0 0.0.0.255 host 172.16.10.45 eq 8080
 permit tcp 192.168.81.0 0.0.0.255 host 172.16.10.46 eq www
 permit tcp 192.168.81.0 0.0.0.255 host 172.16.10.46 range 8080 8099
 permit tcp 192.168.81.0 0.0.0.255 host 172.16.10.46 range 3380 3390
 deny ip any any

acid_kewpie · 11-02-2008, 03:13 AM

at this level there is absolutely no difference, maybe you're using https instead of http? from a client run tcpdump while doing this and we'll see exactly what's going on. also useful to telnet directly to port 80 rather than lose visibility through a browser.