! Generated by Network Security Policy Compiler, version 2.170

! [ BEGIN router:paris ]
! [ Model = IOS ]
! [ Routing ]
! route network:south -> interface:rome.mediteran
ip route 10.3.3.0 255.255.255.0	10.2.2.2
! [ ACL ]
! interface:paris.north
ip access-list extended fastethernet0/0_in
! deny src=network:0/0; dst=interface:paris.north; srv=auto_srv:ip;
 deny ip any  host 10.1.1.2 
! deny src=network:0/0; dst=interface:paris.east; srv=auto_srv:ip;
 deny ip any  host 10.1.2.1 
! deny src=network:0/0; dst=interface:paris.mediteran; srv=auto_srv:ip;
 deny ip any  host 10.2.2.1 
! deny src=network:0/0; dst=interface:paris.ocean; srv=auto_srv:ip;
 deny ip any  host 10.10.1.1 
! permit src=network:0/0; dst=network:east; srv=service:http;
 permit tcp any  10.1.2.0 0.0.0.255 eq 80
! permit src=network:0/0; dst=network:south; srv=reverse:TCP_ANY; stateless
 permit tcp any  10.3.3.0 0.0.0.255  established
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface fastethernet0/0
 ip access-group fastethernet0/0_in in

! interface:paris.east
ip access-list extended fastethernet0/1_in
! deny src=network:0/0; dst=interface:paris.north; srv=auto_srv:ip;
 deny ip any  host 10.1.1.2 
! deny src=network:0/0; dst=interface:paris.east; srv=auto_srv:ip;
 deny ip any  host 10.1.2.1 
! deny src=network:0/0; dst=interface:paris.mediteran; srv=auto_srv:ip;
 deny ip any  host 10.2.2.1 
! deny src=network:0/0; dst=interface:paris.ocean; srv=auto_srv:ip;
 deny ip any  host 10.10.1.1 
! permit src=network:east; dst=network:0/0; srv=reverse:TCP_ANY; stateless
 permit tcp 10.1.2.0 0.0.0.255  any  established
! permit src=network:0/0; dst=network:south; srv=reverse:TCP_ANY; stateless
 permit tcp any  10.3.3.0 0.0.0.255  established
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface fastethernet0/1
 ip access-group fastethernet0/1_in in

! interface:paris.mediteran
ip access-list extended fastethernet0/2_in
! deny src=network:0/0; dst=interface:paris.north; srv=auto_srv:ip;
 deny ip any  host 10.1.1.2 
! deny src=network:0/0; dst=interface:paris.east; srv=auto_srv:ip;
 deny ip any  host 10.1.2.1 
! deny src=network:0/0; dst=interface:paris.mediteran; srv=auto_srv:ip;
 deny ip any  host 10.2.2.1 
! deny src=network:0/0; dst=interface:paris.ocean; srv=auto_srv:ip;
 deny ip any  host 10.10.1.1 
! permit src=network:0/0; dst=network:east; srv=service:http;
 permit tcp any  10.1.2.0 0.0.0.255 eq 80
! permit src=network:south; dst=network:0/0; srv=service:TCP;
 permit tcp 10.3.3.0 0.0.0.255  any 
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface fastethernet0/2
 ip access-group fastethernet0/2_in in

! interface:paris.ocean
ip access-list extended Serial0_in
! deny src=network:0/0; dst=interface:paris.north; srv=auto_srv:ip;
 deny ip any  host 10.1.1.2 
! deny src=network:0/0; dst=interface:paris.east; srv=auto_srv:ip;
 deny ip any  host 10.1.2.1 
! deny src=network:0/0; dst=interface:paris.mediteran; srv=auto_srv:ip;
 deny ip any  host 10.2.2.1 
! deny src=network:0/0; dst=interface:paris.ocean; srv=auto_srv:ip;
 deny ip any  host 10.10.1.1 
! permit src=network:0/0; dst=network:east; srv=service:http;
 permit tcp any  10.1.2.0 0.0.0.255 eq 80
! permit src=network:0/0; dst=network:south; srv=reverse:TCP_ANY; stateless
 permit tcp any  10.3.3.0 0.0.0.255  established
! deny src=network:0/0; dst=network:0/0; srv=auto_srv:ip;
 deny ip any  any 
interface Serial0
 ip access-group Serial0_in in

! [ END router:paris ]