I had the same problem because of the following 172.16.64.3 is a IP address in the inside network; however, in someone turn off 172.16.64.3 and if someone try to access the machine the routing protocol send it to the default gateway the PIX. However on the PIX it knows that 172.16.0.0 is the inside addresses thus the error message u are getting. > > From: "Lidiya White" > Date: 2002/09/24 Tue PM 01:38:57 EDT > To: [EMAIL PROTECTED] > Subject: RE: PIX questions [7:53953] > > The problem here is the source and destination are outside. Why? PIX can't > redirect traffic so even if conduit is allowing this traffic, PIX won't let > it through, unless it's src outside and dst is inside. You either routing > issue here or just something is misconfigured on the PIX. > > Use "wr term" on the PIX to view the current config. > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Sim, CT (Chee Tong) > Sent: Tuesday, September 24, 2002 10:50 AM > To: [EMAIL PROTECTED] > Subject: PIX questions [7:53953] > > > I keep having the following log in my PIX. It is very frequent. What is > that mean? It seems my PIX deny this connection, but actually I want to > allow it now and make it no longer log to the PIX log. > > > > 106011: Deny inbound (No xlate) udp src outside:200.100.182.173/58000 dst > outside:192.168. > > 5.200/58000 > > 106011: Deny inbound (No xlate) udp src outside:200.100.182.173/58000 dst > outside:192.168. > > 5.200/58000 > > 106011: Deny inbound (No xlate) udp src outside:200.100.182.79/58000 dst > outside:192.168.5 > > .200/58001 > > 106011: Deny inbound (No xlate) udp src outside:200.100.182.79/58000 dst > outside:192.168.5 > > .200/58001 > > > > I tried to clear it by adding the following command in the PIX config to > allow the connection to come in. However, I still found the same log in my > PIX? What should be the correct command? > > > > conduit permit udp any range 58000 58001 any > > > > > > Question2- How to show the "running-config" in PIX? I found whenever I made > a change on PIX. I can't see the change when I issue "sh conf" command until > I do "wr mem" What is the router equivalent show running-config command in > PIX? > > > > Thanks a lot > > > > > ================================================================== > De informatie opgenomen in dit bericht kan vertrouwelijk zijn en > is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht > onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en > de afzender direct te informeren door het bericht te retourneren. > ================================================================== > The information contained in this message may be confidential > and is intended to be exclusively for the addressee. Should you > receive this message unintentionally, please do not use the contents > herein and notify the sender immediately by return e-mail. > > > ================================================================== Greg Owens 202-398-2552
Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=53975&t=53953 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
