Re: IPsec Policy to allow web browsing

From: Christopher J. Black [MS] (christb@nospam.microsoft.com)
Date: 10/12/02 

From: "Christopher J. Black [MS]" <christb@nospam.microsoft.com>
Date: Fri, 11 Oct 2002 18:32:51 -0700

Allow web browsing:
    Me -> Any, scr-port "any", dest port 80, protocol, TCP; permit
    Me -> Any, scr-port "any", dest port 443, protocol, TCP; permit

"Tony" <tandcwong@attbi.com> wrote in message
news:c94d262c.0210111131.1f57a1e@posting.google.com...
> I am trying to lockdown my server with ipsec policy.
>
> I have restricted machines from a subnet to allow mapped drives to
> this machine. This seems to be work by opening up port 135 and 445
>
> but I would also like to allow this machine to map to other drives on
> the network. but it is not allowing me to.
>
> I have a deny rule to deny all. Then I allow what I want in or out.
>
> Please help