Firewall# show config : Saved : Written by enable_15 at 17:41:57.953 UTC Thu May 22 2014 ! ASA Version 7.2(4) ! hostname IDSK-Firewall domain-name default.domain.invalid enable password XFvxo5GFME5nCrXq encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface Ethernet0/0 nameif outside security-level 0 ip address 2.2.2.2 255.255.255.240 ! interface Ethernet0/1 nameif inside security-level 100 ip address 192.168.30.2 255.255.255.0 ! interface Ethernet0/2 shutdown no nameif no security-level no ip address ! interface Ethernet0/3 shutdown no nameif no security-level no ip address ! interface Management0/0 nameif management security-level 100 ip address 192.168.1.1 255.255.255.0 management-only ! ftp mode passive dns server-group DefaultDNS domain-name default.domain.invalid access-list internetusers extended permit ip 192.168.0.0 255.255.0.0 any access-list acl_in extended permit ip host 192.168.30.200 any access-list acl_in extended permit ip host 192.168.30.201 any access-list acl_in extended permit ip host 192.168.30.202 any access-list acl_in extended permit ip host 192.168.10.5 any access-list acl_in extended permit ip host 192.168.10.6 any access-list acl_in extended permit ip host 192.168.10.7 any access-list acl_in extended permit ip host 192.168.10.8 any access-list acl_in extended permit ip host 192.168.10.9 any access-list acl_in extended permit ip host 192.168.10.10 any access-list acl_in extended permit ip host 192.168.20.5 any access-list acl_in extended permit ip host 192.168.20.6 any access-list acl_in extended permit ip host 192.168.20.7 any access-list acl_in extended permit ip host 192.168.20.8 any access-list acl_in extended permit ip host 192.168.20.9 any access-list acl_in extended permit ip host 192.168.20.10 any access-list acl_in extended permit ip host 192.168.30.5 any access-list acl_in extended permit ip host 192.168.30.6 any access-list acl_in extended permit ip host 192.168.30.7 any access-list acl_in extended permit ip host 192.168.30.8 any access-list acl_in extended permit ip host 192.168.30.9 any access-list acl_in extended permit ip host 192.168.30.10 any access-list acl_in extended permit ip host 192.168.40.5 any access-list acl_in extended permit ip host 192.168.40.6 any access-list acl_in extended permit ip host 192.168.40.7 any access-list acl_in extended permit ip host 192.168.40.8 any access-list acl_in extended permit ip host 192.168.40.9 any access-list acl_in extended permit ip host 192.168.40.10 any access-list acl_in extended permit ip host 192.168.50.5 any access-list acl_in extended permit ip host 192.168.50.6 any access-list acl_in extended permit ip host 192.168.50.7 any access-list acl_in extended permit ip host 192.168.50.8 any access-list acl_in extended permit ip host 192.168.50.9 any access-list acl_in extended permit ip host 192.168.50.10 any access-list acl_in extended permit tcp 192.168.0.0 255.255.0.0 host 1.1.1.1 eq domain access-list acl_in extended permit udp 192.168.0.0 255.255.0.0 host 1.1.1.1 eq domain access-list acl_in extended permit udp 192.168.0.0 255.255.0.0 host 3.3.3.3 eq domain access-list acl_in extended permit tcp 192.168.0.0 255.255.0.0 host 3.3.3.3 eq domain access-list acl_out extended permit tcp any host 4.4.4.4 eq www access-list acl_out extended permit tcp any host 4.4.4.4 eq 8080 access-list acl_out extended permit tcp any host 4.4.4.4 eq https access-list acl_out extended permit tcp any host 4.4.4.4 eq smtp access-list acl_out extended permit tcp any host 4.4.4.4 eq pop3 access-list acl_out extended permit tcp any host 4.4.4.4 eq imap4 access-list acl_out extended permit tcp any host 5.5.5.5 eq www access-list acl_out extended permit tcp any host 5.5.5.5 eq 8080 access-list acl_out extended permit tcp any host 5.5.5.5 eq https access-list acl_out extended permit tcp any host 5.5.5.5 eq smtp access-list acl_out extended permit tcp any host 5.5.5.5 eq pop3 access-list acl_out extended permit tcp any host 6.6.6.6 eq www access-list acl_out extended permit tcp any host 6.6.6.6 eq 8080 access-list acl_out extended permit tcp any host 6.6.6.6 eq https access-list acl_out extended permit tcp any host 6.6.6.6 eq smtp access-list acl_out extended permit tcp any host 6.6.6.6 eq pop3 access-list acl_out extended permit tcp any host 6.6.6.6 eq imap4 access-list acl_out extended permit tcp any host 2.2.2.2 eq www access-list acl_out extended permit tcp any host 2.2.2.2 eq 8080 access-list acl_out extended permit tcp any host 2.2.2.2 eq https access-list acl_out extended permit tcp any host 2.2.2.2 eq smtp access-list acl_out extended permit tcp any host 2.2.2.2 eq pop3 access-list acl_out extended permit tcp any host 2.2.2.2 eq imap4 pager lines 24 logging enable logging asdm informational mtu outside 1500 mtu inside 1500 mtu management 1500 icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-524.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 access-list internetusers static (inside,outside) 6.6.6.6 192.168.30.200 netmask 255.255.255.255 static (inside,outside) 4.4.4.4 192.168.30.201 netmask 255.255.255.255 static (inside,outside) 5.5.5.5 192.168.30.202 netmask 255.255.255.255 access-group acl_out in interface outside access-group acl_in in interface inside route outside 0.0.0.0 0.0.0.0 210.212.29.145 1 route inside 192.168.0.0 255.255.0.0 192.168.30.252 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute http server enable http 192.168.30.0 255.255.255.0 inside http 192.168.1.0 255.255.255.0 management no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet 192.168.30.0 255.255.255.0 inside telnet timeout 5 ssh 192.168.30.0 255.255.255.0 inside ssh timeout 5 console timeout 0 dhcpd address 192.168.1.2-192.168.1.254 management dhcpd enable management ! username administrator password oKv/p7u0uxALBCkY encrypted privilege 15 ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp ! service-policy global_policy global prompt hostname context Cryptochecksum:742580c5f6dda8b765b18348118c47a0