depends....you have to check the apps people who wrote it... Some apps will not work no matter what you do with NAT.... (This is a VERY common problem with MS DCOM) so be weary.
-Patrick >>> "Kris Waters" 01/17/02 12:45PM >>> I have a Pix 515 running ver. 6.1. I have a host that will be made available to the public for a web-enabled product demonstration. Parts of the product are NOT located on my internal network, so host needs to cross the firewall to function properly. Can I add a line to my access list that will allow this particular host access ONLY to two or three different IP addresses, and deny it access to the rest of the www? Could someone give me a little help with the syntax? Would it be something like this: access-list 101 permit ip 255.255.0.0 255.255.255.0 Can I put all the addresses that I want to allow the host to access in one line? Do I need 3 separate lines? Should I put a deny statement at the end? Will this even work? Am I high? Just kidding, thanks in advance. Kris. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=32327&t=32320 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]