Firewall Wizards mailing list archives
Re: static nat for inside returning traffic
From: "Robert Fenech" <robertfenech () gmail com>
Date: Wed, 14 Nov 2007 19:43:54 +0100
Hi Sean, I might be wrong but if you want to connect to an internal host from an external source you have to configure your PIX with static NAT and create appropriate access-rule entries. Hiding your internal host behind the PIX's external interface IP or any another global IP (PAT) to that matter would not work. However one thing you can do is port forwarding, whereby connections originating from an external source destined to the PIX's external interface IP (or any other global IP) on a specific port are forwarded to a specific internal host. On Nov 14, 2007 12:45 AM, Shahin Ansari <zohal52 () yahoo com> wrote:
Greetings- I come across an issue which I can not explain and need your help please. I was trying to provide access to an inside host from outside. I put in a 1:1 static nat for the outside host, made sure there is a route for both hosts, and updated the outside interface access-list. But there was no connection. I also did not see any message in the logs. Just fyi, this was pix platform running 6.3(x). What seems to have fixed the issue was an static for the inside host. Which I did not think I need since there is a default nat statement on my inside interface translating everything to an global address. Any thoughts? Sean ________________________________ Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now. _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- static nat for inside returning traffic Shahin Ansari (Nov 14)
- Re: static nat for inside returning traffic kevin horvath (Nov 17)
- Re: static nat for inside returning traffic Robert Fenech (Nov 17)
- Re: static nat for inside returning traffic Chris Myers (Nov 21)