Re: Redirect Public IP to Private IP behind the Pix firewall.



I don't post much, I don't think I ever posted on the cisco newsgroup
before though.

I pretty much solved my problem by adding another firewall, so that
works for now.

I will try to diagram the problem I guess.

Internet ---->cisco router ---> Pix firewall (205.204.203.202 to
192.168.0.100, I used static and conduit permit)----> web server

The diagram above shows when someone from the internet request a
document from the web sever, with the Web server's legal IP address.
Everything works fine from this point.

users ---> web server ---> pix firewall (205.204.203.202 to
192.168.0.100, I used static and conduit permit)---> cisco router --->
internet

Now the diagram above shows users behind the firewall when request a
document from the web server. Now when the users request a document
from the web server by the private IP, it works, but when the users
request the document by Internet IP it does not work.

I ended up just installing an IPcop firewall for it's main use for the
web server and now everything works for now. Do I need to add anything
besides a static and conduit permit for the users to have access to the
Internet IP?

.



Relevant Pages

  • Re: Webserver, DMZ, ports questions
    ... Internet accesible services like SMTP have a seperate ... DMZ or a third interface in the firewall. ... As far as source / destination ports goes. ... from the internet to my web server, ...
    (Focus-Microsoft)
  • Re: Web Server not allowing external visitors
    ... | use NATD function of firewall. ... I did all this and lost all access to the internet from the other LAN ... As the Web Server at the moment then is on my FreeBSD machine I do not need ...
    (freebsd-questions)
  • Re: Open port 80, security issues?
    ... PC, opening port 80 in/out in my firewall, so now it is accessable from ... workstation to the Internet. ... should be using Win 2k3 server, which is a Web server platform. ... It protects from the network ...
    (microsoft.public.dotnet.general)
  • Re: How vulnerable server will become if placed on DMZ ?
    ... > I have a type of Web Server. ... > allow people to access the described server from the Internet. ... protect your internal network from a compromised web server. ... network as compared to what you probably have now, a single firewall. ...
    (microsoft.public.win2000.security)
  • Re: Webserver Static Nat With one IP address
    ... >> I am not a firewall expert and hence i need some help. ... >> The internet connection comes in on a Kilostream line from whitc it ... > need to open another port to the web server ...
    (comp.security.firewalls)