sion 6 yet though so
I'm not sure about that one.
Allen
- Original Message -
From: "Evans, TJ"
To:
Sent: Tuesday, June 12, 2001 5:35 AM
Subject: RE: PIX static address translation question [7:8031]
> ... I am running 5.3(1) on a PIX520UR and use nothing but condu
correct protocol & ports to connect as well. The router could
possibly be blocking ICMP or ports also. Can the inside machine ping the
inside interface of the PIX?
- Original Message -
From: "Gary Crouch"
To:
Sent: Monday, June 11, 2001 2:06 PM
Subject: PIX static address
connect as well. The router could
possibly be blocking ICMP or ports also. Can the inside machine ping the
inside interface of the PIX?
- Original Message -
From: "Gary Crouch"
To:
Sent: Monday, June 11, 2001 2:06 PM
Subject: PIX static address translation question [7:8031]
hehe...it let him say anal and I couldn't put in P I X S H O T I N T H E
D A R K without being filtered ;)
Technology never ceases to amaze/amuse me ;)
- Original Message -
From: "Jonathan Hays"
To:
Sent: Monday, June 11, 2001 3:47 PM
Subject: Re: PIX static addr
Gary,
Let me be a bit anal here and clarify the situation.
"on a subnet local to the firewall" - on the inside subnet, I assume? (To
be picky,
both the inside and outside subnets are local.)
To be completely clear about this, you are saying that you can ping from a
router/host
outside the PIX
be blocking ICMP or ports also. Can the inside machine ping the
inside interface of the PIX?
- Original Message -
From: "Gary Crouch"
To:
Sent: Monday, June 11, 2001 2:06 PM
Subject: PIX static address translation question [7:8031]
> we have servers hosted at a ISP and ha
om: "Gary Crouch"
To:
Sent: Monday, June 11, 2001 2:06 PM
Subject: PIX static address translation question [7:8031]
> we have servers hosted at a ISP and have a back port connection
> and would like to give a client access thur our back port using one of our
> external IP addre
the conduit permit icmp any any is applied
I have several servers with conduits applied on a subnet local to the
firewall
and can ping and access them with no problems from the outside.
just need to get it working with a router between the server and firewall.
>>> [EMAIL PROTECTED] 06/11/01 12:27
Gary,
To ping through the PIX firewall make sure you have the "conduit permit icmp
any any"
applied (or if you have a newer PIX OS you can use the "access-list"
command).
See
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v50/config/config.htm
-Jonathan
Gary Crouch wrote:
> we
we have servers hosted at a ISP and have a back port connection
and would like to give a client access thur our back port using one of our
external IP address I have configure a static address translation for the
external ip address
and added a route for the internal address I can pig the interna
10 matches
Mail list logo
