Blocking outside ip's from an internal ip

Jim Boyce (jim@tradeex.com)
Mon, 19 May 1997 11:55:59 -0400

How would I block all people outside of our LAN from a certain IP in our =
lan? (actually for a website). I had tried some of your suggestions but =
am still having a problem.
Shouldn't this work:

deny 0.0.0.0/0 206.30.200.X/32 tcp dst eq 80
permit 206.30.200.0/32 206.30.200.X/32 tcp dst eq 80

assuming the 206.30.200.x is the internal ip that I want to block =
outsiders from.

I thought what I had above was correct but people can still seem to get =
in (web wise that is)

Thanks!

Jim