Matthew Carpenter wrote: > Apr 11 200211:37:59: %PIX-3-106011: Deny inbound (No xlate) icmp src > outside:208.185.54.14 dst outside:208.249.103.99 (type 8, code 0) >
it isn't a problem. and it isn't a problem of your acl/conduits. i think, a network is static routed to your pix. but you don't use all ip addresses of this network. you only have separated "static"-entries for this net. when a packet arrieves the pix, where a static entry is missing, the pix says : no nat translation for this ip address (no xlate). and it's no matter, it's icmp, udp or tcp. regards dirk _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
