Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have tried to make my pix 515 allow traffic from outisde interface to inside, but despite permitting ACL's, it doesn't seem to let traffic through. (It is letting traffic out as it should though)

I am have tried both of the following:

access-list acl_in extended permit tcp any host 10.131.73.2 eq www

and

access-list acl_in extended permit ip any any

None of them help, but I can access 10.131.73.2 from any host on the inside network. This is a one single host on the inside that should every now and then have an HTTP server running for development purpouses, so it doesn't need to reside on DMZ (and as far as I know, I can't place it on DMZ either as it's in the same subnet as the other ip's I have.

Could I have missed anything? I am using PIX Version 8.0(4)

My current running config looks like this: http://pastebin.com/TvRFyDrF

Hope someone can help me get this working.

share|improve this question
    
Isn't there a way to debug tcp/udp packets so that I can see where it's being stopped? THe thing here is, that the pix should not NAT any traffic, as the IPs I'm getting from my ISP is already NAT'ed. –  Rickard Dec 13 '12 at 22:21
    
Anyone who'd have the time to help? –  Rickard Dec 14 '12 at 11:54
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.