! Listing 8.13: A tighter access list for incoming traffic affording more protection
!
!Copyright (C) 2001 by Vincent C Jones. All Rights Reserved.


! Define traffic permitted back from the service bureau
access-list 101 permit icmp host 172.17.30.55 host 10.230.0.1
access-list 101 permit icmp 192.168.0.0 0.0.0.3 host 10.230.0.1
access-list 101 deny   ip any 10.230.0.0 0.0.0.1 log
access-list 101 deny   ip any host 10.230.255.255 log
access-list 101 permit tcp host 172.17.30.55 eq 3306 10.230.0.0 0.0.255.255 established
access-list 101 deny   ip any any log
!
end