Re: Pix questions [7:57686]

2002-11-19 Thread Richard Deal
Ramesh, As to routing, the PIX will forward packets from one interface to another, but you have to do certain things to accomplish this: >From higher security level to lower, you need nat and global commands; from lower to higher, you need static and access-list commands. Fro external people acce

Pix questions [7:57686]

2002-11-19 Thread ramesh c
1)I got traffic flowing from outside to dmz.I got a mail server sitting on the dmz. access-list acl_outside permit tcp any host mail eq smtp Do I need to the following?or just the access-list will do? static (dmz,outside) mail mail netmask 255.255.255.255 0 2)Can inside access DMZ without nat c