Help with an access list please

Hi guys, i have an access list applied inbound to an interface on a router at the edge of our LAN.Our LAN subnet is 10.10.x.x and the incoming subnet is 10.13.x.x both with a 16 bit mask. The ACL is applied inbound to the interface that the the 10.13.x.x subnet come in on. I want to only allow them to go to our internal webserver to run a corporate web app, resolve dns for this web server with our dns servers, and have full access to a server on the other side of our WAN for another 32 bit app they are running. Here is my ACL:(you will notice i have also configured a single ip full access in for us to use when we are on site)
access-list 101 permit ip 10.10.0.0 0.0.255.255 any
access-list 101 permit ip host 10.13.1.254 any
access-list 101 permit udp 10.13.0.0 0.0.255.255 host 10.10.10.1 eq domain
access-list 101 permit udp 10.13.0.0 0.0.255.255 host 10.10.10.2 eq domain
access-list 101 permit tcp 10.13.0.0 0.0.255.255 host 10.10.10.2 eq domain
access-list 101 permit tcp 10.13.0.0 0.0.255.255 host 10.10.10.1 eq domain
access-list 101 permit ip 10.13.0.0 0.0.255.255 host 192.168.9.1
access-list 101 permit tcp 10.13.0.0 0.0.255.255 host 10.10.10.24 eq www
access-list 101 deny ip 10.13.0.0 0.0.255.255 10.0.0.0 0.255.255.255
access-list 101 deny ip 10.13.0.0 0.0.255.255 172.16.100.0 0.0.0.255
access-list 101 deny ip any any
From the 10.13.x.x network this works like a charm but here is the key: i want to be able to remote admin their machines but cant. Even though the ACL is applied inbound only i cant get to their subnet, even with the first permit statement i still cant get to their subnet. I am assuming its allowing me in but the problem is lying with the return traffic. Is their a way for me to deny them access as in the list but for me to remote their subnet?
Any help you could offer would be appreciated.

I agree with you that the first line in the access list is incorrect. Coming in that interface the source address should never be 10.10.0.0. But if he follows your first suggestion then any IP packet from 10.13.anything to anything will be permitted and none of the other statements in the access list will have any effect.
And I have a serious issue with what he appears to suggest which is that he will take his laptop (with a 10.10.x.x address), connect it into a remote subnet, and expect it to work. Unless he has IP mobility configured, he may be able to send packets out, but responses to 10.10.x.x will be sent to the 10.10.0.0 subnet and will not get to his laptop. He needs to rething this logic.
I do agree with your second suggestion that:
access-list 101 permit tcp 10.13.0.0 0.0.255.255 eq 5900 10.10.0.0 0.0.255.255
should allow the remote administration to work (assuming that 5900 is the correct port and assuming that it uses tcp not udp).
HTH
Rick

Similar Messages

Help with guided access

I need help with guided access! My friend's ipod touch 4 used guided access. She can't turn off her ipod touch, and the home button won't work. When she uses the home button, it shows a message that says she needs to click it 3 times. How do i fix it? Please help!

See:
iOS: About Guided Access
In case i forget my guided access...: Apple Support Communities
SOS I cannot Exit Guided access: Apple Support Communities

Need help with flash player installation please !!!!

Hello,
I need help with my flash player installation because every time I access a movie this is the message I receive.
This content on Xfinity TV is not available for viewing with Chrome's "Incognito" mode. To play this video using Chrome, please view this page without "Incognito" mode.
Still having problems? Try resetting your Flash player license.

Incognito mode is a Google Chrome setting when you open a new window (Cmd+Shift+N on a Mac Ctrl+Shift+N on Windows) It opens a "private" window with no cookies and no tracking. The problem with it is that when you disable cookies, your license files are not sent to the site (whetehr it's YouTube or xFinity or any other that uses license files for paid content) and it treats you as if you're a first time visitor. Paid videos won't play wihtout the cookies sending the license file info.
This isn't a Flash Player setting. It's in Chrome. I did some research and according to Google, "Incignito" mode is off by default, and can ONLY be activate by the keyboard shortcut. There IS a way to disable it from the registry http://dev.chromium.org/administrators/policy-list-3#IncognitoModeAvailability

Need Help with hijacked contact lists

Hello all, I am new here, so please forgive me if I'm posting to the wrong board...didn't really see anything more appropriate. I have a problem with a hijacked contact list:
I have three email accounts being forwarded to my BB Curve 8530. Two from Yahoo and one from AOL. In each of these accounts (when accessed directly from yahoo.com or aol.com) have different contacts. Not all of these contacts are in my BB contact list. The other day, one of my yahoo accounts was somehow hacked, and resulted in one of those spam "drugs for sale" emails being sent to people in my contact list. Well, when I investigated, I discovered that actually, someone who is not even in that particular accounts contact list, but another account. How is this possible?
If that is confusing, here's a better summary (using fake email addresses):
[email protected] sent a bogus email message to [email protected]
but, [email protected] is not in [email protected]'s address book. it is in [email protected] [email protected] is not listed in my BB device's contact list.
The only thing I can think os is somehow the BB was hacked, and someone was able to go through all linked contact lists, and send an email across all connected accounts.
How was this able to happen? what can I do to stop it?
thanks!
Lee

This is the Welcome and Introductions section, so Greetings, and welcome!
The 8500 model section would be perfect for your questions,so we'll get it move there.
Meanwhile,
leevalon wrote:
The only thing I can think os is somehow the BB was hacked, and someone was able to go through all linked contact lists, and send an email across all connected accounts.
Sorry, not possible... UNLESS you gave your BlackBerry to someone to use for a while, during which time they spammed all your contacts. Did you?
Do you have a Security password set on the device? If you are afraid of the above happening, setting the password will just that impossible.
But it wasn't hacked.
1. If any post helps you please click the below the post(s) that helped you.
2. Please resolve your thread by marking the post "Solution?" which solved it for you!
3. Install free BlackBerry Protect today for backups of contacts and data.
4. Guide to Unlocking your BlackBerry & Unlock Codes
Join our BBM Channels (Beta)
BlackBerry Support Forums Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Need help with thinkvantage access connection

Here a log file with new access connection:
Connection status:  Disconnected
Cause:  Driver disconnected while associating.
Error code:  229378
Recommended actions:
Verify that the encryption settings (WEP/TKIP/AES) specified in this profile match those expected by the wireless network.
Verify that the wireless adapter in your computer has not been restricted from accessing the radio channels being used by the wireless network.
If the problem persists, contact your network administrator and provide the troubleshooting information below.
Adapter Details
Adapter name  11a/b/g Wireless LAN Mini PCI Express Adapter
Adapter type  Wireless LAN
Adapter speed  54.0 Mbps
Driver/Firmware version  7.6.0.96/ N/A
Adapter status  Enabled
Connection Status  Disconnected
Disable unused cards?  Yes
TCP/IP Settings
DHCP enabled?  Yes
Append parent suffixes of the primary DNS suffix?  Yes
Register connection's DNS suffix in registration?  Yes
Register connection's DNS suffix in DNS registration?  Yes
Enable LMHOSTS Lookup?  No
NetBIOS setting  "Default"
Wireless Settings
Network name (SSID)  linksys
Connection type  Access point
Wireless mode  Auto
Security encryption  None
System Information
System model  7732CTO
BIOS version  7LETB7WW (2.17 )
Operating system version  Windows Vista, Service pack 2
Access connections version  5.31
Access Point scan list
Network name (SSID)              Wireless mode MAC address                   Signal strength Channel
linksys                          802.11g        00:1C:10:54:65:B6              24%            11
Global Settings
Network
Allow all users of this system to switch to any existing location profile  -> No
Allow the wireless LAN radio to be turned off when inactive  -> No
Allow selection of location profiles with Fn+F5 On Screen Display menu  -> Yes
Enable autodeletion of unused profiles  -> Yes
Notifications
Show ThinkVantage Access Connections status icon in task tray  -> No
Show wireless status icon in task tray  -> No
Display the progress indicator window when a profile is being applied  -> Yes
Preferences
Enable sound effects  -> Yes
Do not show balloon tips from the Access Connections system tray icon  -> Yes
Show WiMAX page as default on Main GUI  -> No
Automatic location profile switching list
Include Ethernet connections in automatic switching and prompt me to save Ethernet ports  -> Yes
When no other connections are available, connect through Wireless WAN or WiMAX  -> No
Wireless priority list
Selection    Priority     Location profile name                                            Connection order                 Connection details
No                  1     linksys                                                          Wireless LAN                     SSID: linksys
Log File
Debug Log is enabled
It didn't happen when I use old version. Can anybody help me?

Are you getting any error message while connecting to ds..?
Are you able to go online on wired computer...?
Are you able to go online on any wireless computer on your network..?
Open the router setup page and under the wireless tab,Change the Channel width to 20MHz only and Channel to 11-2.462GHz and click on save settings...Under the Advanced Wireless Settings...Change the Beacon Interval to 75,Change the Fragmentation Threshold to 2304,Change the RTS Threshold to 2304 and Click on Save Settings...
Now,check.

Need help with threads?.. please check my approach!!

Hello frnds,
I am trying to write a program.. who monitors my external tool.. please check my way of doing it.. as whenever i write programs having thread.. i end up goosy.. :(
first let me tell.. what I want from program.. I have to start an external tool.. on separate thread.. (as it takes some time).. then it takes some arguments(3 arguments).. from file.. so i read the file.. and have to run tool.. continously.. until there are arguments left.. in file.. or.. user has stopped it by pressing STOP button..
I have to put a marker in file too.. so that.. if program started again.. file is read from marker postion.. !!
Hope I make clear.. what am trying to do!!
My approach is like..
1. Have two buttons.. START and STOP on Frame..
START--> pressed
2. check marker("$" sign.. placed in beginning of file during start).. on file..
     read File from marker.. got 3 arg.. pass it to tool.. and run it.. (on separate thread).. put marker.. (for next reading)
     Step 2.. continously..
3. STOP--> pressed
     until last thread.. stops.. keep running the tool.. and when last thread stops.. stop reading any more arguments..
Question is:
1. Should i read file again and again.. ?.. or read it once after "$" sign.. store data in array.. and once stopped pressed.. read file again.. and put marker ("$" sign) at last read line..
2. how should i know when my thread has stopped.. so I start tool again??.. am totally confused.. !!
please modify my approach.. if u find anything odd..
Thanks a lot in advance
gervini

Hello,
I have no experience with threads or with having more than run "program" in a single java file. All my java files have the same structure. This master.java looks something like this:
---master.java---------------------------------------------------
import java.sql.*;
import...
public class Master {
public static void main(String args []) throws SQLException, IOException {
//create connection pool here
while (true) { // start loop here (each loop takes about five minutes)
// set values of variables
// select a slave process to run (from a list of slave programs)
execute selected slave program
// check for loop exit value
} // end while loop
System.out.println("Program Complete");
} catch (Exception e) {
System.out.println("Error: " + e);
} finally {
if (rSet1 != null)
try { rSet1.close(); } catch( SQLException ignore ) { /* ignored */ }
connection.close();
-------end master.java--------------------------------------------------------
This master.java program will run continuously for days or weeks, each time through the loop starting another slave process which runs for five minutes to up to an hour, which means there may be ten to twenty of these slave processes running simultaneously.
I believe threads is the best way to do this, but I don't know where to locate these slave programs: either inside the master.java program or separate slave.java files? I will need help with either method.
Your help is greatly appreciated. Thank you.
Logan

With Timed Access List on, Guest users cannot access Guest network.

I have a ABS with 7.5 version. In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. Then i have the main network hidden. My guest network is broadcasting but when a user tries to connect to it, they get a "Unable to connect". If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
Obviously, this is a bug. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network.
It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network, when it should only be controlling the Main only.
Hopefully, apple has noted this issue and will be fixed on the new update. If other people are experiencing this problem, Please let me know.
-Ghost

Apple just updated the airport to 7.5.1. But there is still a problem with the the guest network not allowing access. If the "Unlimited" is set to "No Access" in the access list it prevents anybody from accessing the guest network. It should only deny your Main wireless Network.
In other words, the Access List is controlling the access for both wireless networks(Guest and Main network)
Either apple needs to create two Access Lists, One for Main network, and One for guest network. Or just have to option to choose which Network you want to restrict leaving the second one open for all.
-Ghost

Help with sorting a list

Hi,
can anyone help me with sorting of a list by date?
I have like 5 objects in the list, 4 are string and one is list.
I want to sort them by Date..
How can I do that?
I don't know if I can use CompateTo?? I am new to programing, I would appreciate if anyone can explain with sample code.
Your help is appreciated.

ASH_2007 wrote:
Hey thanks for your response, but there is a little problem with what I said earlier.
Actually my List is a type of record (it's called Employee record)
Here what exactly I have:
for Iint i=0; i< employeeRecord.getList().size(); i++)
EmployeeRecord emp = employeeRecord.getList().get(i);
//so if I can not hold my date information in an object, coz it's says type mismatch
//I am not sure how can I do this?
}Can you please help with sample code?
Thanks tonsEither cast or learn about generics. Also, use an Iterator or a foreach loop, NOT get(i).
[Collections tutorial|http://java.sun.com/docs/books/tutorial/collections/]
[Generics intro|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]
[Generics tutorial|http://java.sun.com/j2se/1.5/pdf/generics-tutorial.pdf]
Foreach

Need some help with the colour profile please. Urgent! Thanks

Dear all, I need help with the colour profile of my photoshop CS6.
I've taken a photo with my Canon DSLR. When I opened the raw with ACDSee, the colour looks perfectly ok.
So I go ahead and open in photoshop. I did nothing to the photo. It still looks ok
Then I'm prompt the Embedded Profile Mismatch error. I go ahead and choose Discard the embedded profile option
And the colour started to get messed up.
And the output is a total diasater
Put the above photo side by side with the raw, the red has became crimson!!
So I tried the other option, Use the embedded profile
The whole picture turns yellowish in Photoshop's interface
And the output is just the same as the third option.
Could someone please guide me how to fix this? Thank you.

I'm prompt the Embedded Profile Mismatch error. I go ahead and choose Discard the embedded profile option
always use the embedded profile when opening tagged images in Photoshop - at that point Photoshop will convert the source colors over to your monitor space correctly
if your colors are wrong at that point either your monitor profile is off, or your source colors are not what you think they are - if other apps are displaying correctly you most likely have either a defective monitor profile or source profile issues
windows calibrate link:
http://windows.microsoft.com/en-US/windows7/Calibrate-your-display
for Photoshop to work properly, i recall you want to have "use my settings for this device" checked in Color Management> Device tab
you may want to download the PDI reference image to check your monitor and print workflows
and complete five easy steps to profile enlightenment in Photoshop
with your settings, monitor profile and source profiles sorted out it should be pretty easy to pinpoint the problem...

Help with Remote access VPN on Cisco router 3925 via Dialer Interface

Hi Everybody,
I need help for my work now, I appreciate if someone can fix my problem.I have a Cisco router 3925 and access Internet via PPPoE link. I want config VPN Remote Access and using software Cisco VPN client. But it doesn't work.. Here my config router :
HUNRE#show running-config
Building configuration...
Current configuration : 5515 bytes
! No configuration change since last restart
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname HUNRE
boot-start-marker
boot-end-marker
enable secret 5 $1$vEFw$rLfvLglzUgddCVwXDx03K.
enable password cisco
aaa new-model
aaa session-id common
crypto pki trustpoint TP-self-signed-1050416327
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1050416327
revocation-check none
rsakeypair TP-self-signed-1050416327
crypto pki certificate chain TP-self-signed-1050416327
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31303530 34313633 3237301E 170D3134 30393235 31313534
31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 30353034
31363332 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CC79 74FCFABE 81183B70 5A9F4A53 EB609754 7D5F8587 9150B76E 3207A86E
5B65F9E9 6CDAC21A 6D69221D 1FF61632 14763308 43B2A1CC 8EE5ABAC EF07530E
3F0D35FE F08C955B 60B52B92 F8F54D53 DD6DD623 01F83493 02F9C49A F0C3483D
3B48A008 8D96700E 88924BFE DE00201B DE5965DE 32898CAD 9012AB55 76B6F39B
2D470203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14C3418C BC35F3D9 B26B2475 2BB5F826 060525AB B3301D06
03551D0E 04160414 C3418CBC 35F3D9B2 6B24752B B5F82606 0525ABB3 300D0609
2A864886 F70D0101 05050003 81810070 AC7C26C6 4606A551 1A3FD6C5 2A5AEAE8
35DAC86E F8885E26 51F6EEAE 7565D3AA D532C8F3 55F6656F D103F38C 8FBDE7F1
83E77143 76469040 7FEA41E8 14963DB3 F7F28EA0 C5F2F42C B186B75C AAB04900
15F9CB38 A16964F5 4E7B4378 35041AA8 AE8EC181 D58D6A62 676E286A 7B9D80E6
35A0B9FB FB76E976 3D2A19D7 006078
        quit
ip name-server 210.245.1.253
ip name-server 210.245.1.254
ip cef
no ipv6 cef
multilink bundle-name authenticated
vpdn enable
vpdn-group 1
vpdn-group 2
license udi pid C3900-SPE100/K9 sn FOC1823839B
license boot module c3900 technology-package securityk9
username cisco privilege 15 secret 5 $1$aAjB$D3iLyPFTE7O1bHPnKSJcH0
username kdhong privilege 15 secret 5 $1$nfyX$FO1BPTabCUaE6uKQwpLT.1
redundancy
track 1 ip sla 1 reachability
track 2 ip sla 2 reachability
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration group VPN-HUNRE
key hunre
dns 8.8.8.8
domain hunre
pool IP-VPN
acl 199
max-users 100
crypto ipsec transform-set encrypt-method-1 esp-3des esp-sha-hmac
mode tunnel
crypto dynamic-map DYNMAP 1
set transform-set encrypt-method-1
crypto map VPN client configuration address respond
crypto map VPN 65535 ipsec-isakmp dynamic DYNMAP
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip mtu 1492
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1412
duplex auto
speed auto
interface GigabitEthernet0/1
description FPT
no ip address
ip tcp adjust-mss 1412
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
interface GigabitEthernet0/2
description Connect to CMC
no ip address
ip mtu 1442
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1412
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 2
no cdp enable
interface Dialer1
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname [USERNAME]
ppp chap password 0 [PASSWORD]
ppp pap sent-username [USERNAME] password 0 [PASSWORD]
ppp ipcp dns request
crypto map VPN
interface Dialer2
description Logical ADSL Interface 2
ip address negotiated
ip mtu 1442
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1344
dialer pool 2
dialer-group 2
ppp authentication chap pap callin
ppp chap hostname [USERNAME]
ppp chap password 0 [PASSWORD]
ppp pap sent-username [USERNAME] password 0 [PASSWORD]
ppp ipcp address accept
no cdp enable
ip local pool IP-VPN 10.252.252.2 10.252.252.245
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
ip nat inside source list 11 interface Dialer2 overload
ip nat inside source static 10.159.217.10 interface Dialer1
ip nat inside source list 199 interface Dialer1 overload
ip nat inside source static tcp 10.159.217.10 80 210.245.54.49 80 extendable
ip nat inside source static tcp 10.159.217.10 3389 210.245.54.49 3389 extendable
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 10.159.217.0 255.255.255.0 192.168.1.8
ip sla auto discovery
ip sla responder
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip permit
access-list 10 permit any
access-list 11 permit any
access-list 101 permit icmp any any
access-list 199 permit ip any any
control-plane
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
transport input all
line vty 5 15
password cisco
transport input all
scheduler allocate 20000 1000
ntp master
end
However, I cannot ping interfac Dialer 1. I using Cisco vpn client software ver 5.0.07.0290.
Hopeful for your answers !
Thanks

Hi David Castro,
Thanks for your answer,
I configed following your guide, but it have not worked yet. I saw that I cannot ping IP gateway Internet . I using ADSL Internet and config PPPoE and my router receive IP from ISP. Here show ip int brief :
GigabitEthernet0/0         192.168.1.1     YES NVRAM up                    up
GigabitEthernet0/1         unassigned      YES NVRAM up                    up
GigabitEthernet0/2         unassigned      YES NVRAM up                    up
Dialer1                    210.245.54.49   YES IPCP   up                    up
Dialer2                    101.99.7.73     YES IPCP   up                    up
NVI0                       192.168.1.1     YES unset up                    up
Virtual-Access1            unassigned      YES unset up                    up
Virtual-Access2            unassigned      YES unset up                    up
Virtual-Access3            unassigned      YES unset up                    up
But I cannot ping Interface Dialer 1, so may be VPN is does not worked. Do you have some ideal ?
Thanks very much !

Mac OS X help with share access on a windows 2003 server

Hello everyone
I am not too familiar with Mac OS X (Darwin) and so on and need a little help.
We recently got a new windows 2003 standard server and I want to move my files to there so they get backed up and so on. I am able to access shares on the pc's on our network but when I try to access the server from finder i just get a box pop up saysing do you want to fix or delete the alias.
When I try to access it via a terminal, because I am a bit more ok with the cmd line thanks to my linux capabilities, I get the following error:
mount_smbfs: tree connect phase failed: syserr = Permission denied
when i try:
mount_smbfs //dan:[email protected]/General\ Files /BB-SERVER/General\ Files
Is there anybody that has experienced this before and that can help me resolve this.
Thank you in advance
Kobus

Hi Kobus Bensch,
I'm sorry I am not able to help with your questions about sharing from your Mac to the server but wanted to suggest that you post back the exact Mac OS version you are using. Your specs below your post suggest 10.0.x which was barely a beta version of Mac OS X. This will surely help those who are seeing your topic and trying to help.
To find the version you can simply click on the blue Apple in your top menu bar and select About This Mac.
good luck,
littleshoulders

Help with UL navigation list

Hello all, I need some help with a left navigation menu I
have created, you can see the code below:
the problem I have is when I am putting a link to the UL it
doesn't work ( probably because I have a background image in my
CSS) i was wondering if I can do it with another way..
css code
.treemenu {
margin : 0px 20px;
padding : 10px;
list-style : none;
width : 200px;
.treemenu ul {
list-style : none;
margin : 0px 5px;
padding : 0px 5px;
.treemenu li {
display : inline;
.treemenu a {
display : block;
padding-left : 0px;
text-decoration : none;
.treemenu .treeopen {
background-image : url('../img/open.gif');
background-repeat : no-repeat;
background-position : left;
.treemenu .treeclosed {
background-image : url('../img/closed.gif');
background-repeat : no-repeat;
background-position : left;
UL

Hello all, I need some help with a left navigation menu I
have created, you can see the code below:
the problem I have is when I am putting a link to the UL it
doesn't work ( probably because I have a background image in my
CSS) i was wondering if I can do it with another way..
css code
.treemenu {
margin : 0px 20px;
padding : 10px;
list-style : none;
width : 200px;
.treemenu ul {
list-style : none;
margin : 0px 5px;
padding : 0px 5px;
.treemenu li {
display : inline;
.treemenu a {
display : block;
padding-left : 0px;
text-decoration : none;
.treemenu .treeopen {
background-image : url('../img/open.gif');
background-repeat : no-repeat;
background-position : left;
.treemenu .treeclosed {
background-image : url('../img/closed.gif');
background-repeat : no-repeat;
background-position : left;
UL

Need Help to create access-list based on traffic logs

Hello,
We didn't have any Firewall in our network, we recently implemented Cisco ASA (Context) firewall in our network with any any permit rule .
Our intension is to collect the source, destination, protocol & ports based on the traffic logs and then implement the access-lists , once we confirmed all the rule will added to the firewall we want remove any any permit rule .
I need some suggestion regarding this how we can proceed on this plan, any suggestions appreciated
Rajkumar

Hi Rajkumar,
That is not the ideal way of doing... this will lead to a provisioning an unauthorized person to access for something he is not authorized to.
How many users do you have in your network? Try to categorize users based on their present authorization level of access.... say Team A users need to access everything... then you need to group them and provide full access..... Team B users need to be provided with only restricted access.... then group them and provide restricted access....
If your case is something like this.... all users need unrestricted intranet access and certain users alone requires internet acceess... then you can define rules accordingly....
Regards
Karthik
Regards
Karthik

Help with data access

Hi,
I am new to Java and stuck at a problem. Situation is like following-
package X
public abstract class A {
     A(int a) { this.a=p; }
     protected int p;
     abstract int func();
package Y
public class B extends A{
     B(int b) { super(b); }
     B() {}
     //p is accessible here
     int func() {
          D d=new D();
          d.func2();
    static void main() {
        func();
public abstract class C extends B{
public class D extends C implements interface{
     int func2() {}
}Now my problem is when I try to access p from func2(), I am getting a NullPointerException error. I am not initialising p anywhere through D()'s and B()'s no argument constructor. Is that the problem?

When you post code it doesn't help when the code doesn't actually reflect the problem.
The code you posted isn't legal java so given that it won't even compile you certainly can't get a null pointer exception from that. And where you commented the usage of 'p' you can't use it there so that doesn't help with guessing what you actual code might have looked like.
So all I can do is offer the following general advice.
Null pointer exceptions occur because a reference is null and it is de-referenced.. Thus if you do a line like the following.
xxx.p
Then 'xxx' is the only possible thing that can be null.
The stack trace of the exception will tell you the exact line that the problem occurred on.

Help with Skype Access Number for South Africa

Hello Can someone point me in the right direction for the Skype access number for South Africa (where I am going on holiday later this week). I can see numbers for other places in my account but cannot figure out how to add one for a new country. ThanksDuncan

Hello,
This is a known issue involving our South African service provider. We are working as quickly as possible to have the issue resolved. Please accept our apologies for the inconvenience.
TIME ZONE - US EASTERN. LOCATION - PHILADELPHIA, PA, USA.
I recommend that you always run the latest Skype version: Windows & Mac
If my advice helped to fix your issue please mark it as a solution to help others.
Please note that I generally don't respond to unsolicited Private Messages. Thank you.

Help with an access list please

Similar Messages

Maybe you are looking for