you need another access list from inside to dmz to permit ip any any ( or specific ports and addresses ) - make sure you have a global or static between inside and dmz .
Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=55534&t=55447 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]