access-list on inside interface trouble

I have a PIX version 7 with the following config
access-list allow_from_inside permit tcp 192.168.10.0 255.255.255.0 any eq www
access-list allow_from_inside deny ip any any
access-group allow_from_inside in interface inside
nat(inside) 1 192.168.10.0 255.255.255.0
global (outside) 1 192.168.100.250

When I apply the follwing access-list on the inside interface,I cannot access the internet. Any idea why?

You have forgotton to add another access rule to allow dns resolution as follows:

access-list allow_from_inside permit udp 192.168.10.0 255.255.255.0 any eq 53

Hope this fixes the issue.


Regards,
Rahul Pathania...!!!
Empowering the Internet generation

O lord, ACLs. I am so sick of those. I had to do a whole bunch of those in CCNA 2.

I would suggest you specifically allow DNS traffic *ONLY* to your DNS server... that's a better written firewall rule, otherwise you've got a bit of a loophole going there.

In other words, provide the DNS server address in the permit rule.

Cheers,