Re: PIX Port Forwarding Problem


"Cisco Newbie" <noemail@xxxxxxxxxxxxxxx> wrote in message
news:oVktf.70455$vl2.37602@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
> I've been trying for some time to get my PIX 515 firewall to allow HTTP
> requests to pass through and go to a web server hosted on my internal
> network.Unfortunately I have not managed to get this working - even after
> reading numerous articles.The scenario is that the outside interface is
> connected to a cable modem and the WAN IP address is assigned through DHCP
> by my ISP.My PIX config is shown below, I want www requests to my dynamic
IP
> address to be passed through to an internal web server at 192.168.1.150?

This series of commands accomplishes the task on my PIX 501. It should also
on your 515.

static (inside,outside) tcp interface 80 192.168.1.150
access-list outside_access_in permit tcp any interface outside eq 80
clear xlate
clear arp
clear local
write mem



.

Relevant Pages

  • Re: PIX Port Forwarding Problem
    ... >> I've been trying for some time to get my PIX 515 firewall to allow HTTP ... >> by my ISP.My PIX config is shown below, I want www requests to my dynamic ... >> address to be passed through to an internal web server at 192.168.1.150? ...
    (comp.dcom.sys.cisco)
  • Re: PIX Port Forwarding Problem
    ... >> I've been trying for some time to get my PIX 515 firewall to allow HTTP ... >> by my ISP.My PIX config is shown below, I want www requests to my dynamic ... >> address to be passed through to an internal web server at 192.168.1.150? ...
    (comp.dcom.sys.cisco)
  • PIX Port Forwarding
    ... So I am trying to setup traffic so I can access my web server on the ... intranet via the external address. ... traffic back out of the same interface it is sent to. ... using a PIX 501, can anyone help me with my options. ...
    (comp.dcom.sys.cisco)
  • Re: PIX 501 PAT going to wrong host
    ... I don't see how any requests are getting from outside to the inside ... interface since you have no conduits defined in the config you posted. ... This command will allow anyone coming from outside the PIX to go to ...
    (comp.dcom.sys.cisco)
  • Re: Interesting problem with pix 515 UR
    ... Consider diabling Proxy arp on inside interface. ... This pix have only 2 ethernet interfaces; i have connected the ethernet0via a cross cable ... fixup protocol dns maximum-length 512 ... ntp server 194.100.206.70 source outside ...
    (comp.dcom.sys.cisco)