yes, you can do it. a little example:
ip address outside 172.16.0.1 255.255.255.0 ip address inside 10.0.0.254 255.255.255.0 .... static (inside,outside) tcp 172.16.0.2 www 10.0.0.2 1234 netmask 255.255.255.255 static (inside,outside) tcp interface www 10.0.0.2 1235 netmask 255.255.255.255 ... conduit permit .... it should be clear, 10.0.0.2 is your internal webserver. connecting 172.16.0.1 at port 80 will be forwarded to 10.0.0.2 port 1235, connecting 172.16.0.2 at port 80 will be forwarded to 10.0.0.2 port 1234. don't disable proxyarp at outside interface. best regards dirk -- energis-ISION Dirk Pfau IP Network / iSecurity Harburger Schlossstr. 1 D-21079 Hamburg Fon: +49 40 77175-538 eMail: [EMAIL PROTECTED] Web: http://www.energis-ision.com _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
