topic ASA5505 port 3306 request discarded in Network Security

ASA5505 port 3306 request discarded

stalwartweare — Tue, 12 Mar 2019 00:12:04 GMT

ASA5505 port 3306

I have been fighting for days to open the port 3306 on my appliance, I have read carefully all the forums and no success.

I allways get the message :

Oct 21 2012

17:29:32

90.27.181.120

54655

212.147.49.18

3306

TCP request discarded from 90.27.181.120/54655 to outside:212.147.49.18/3306

I have attached m y configuration

thanks for any help

ASA5505 port 3306 request discarded

Julio Carvajal — Sun, 21 Oct 2012 19:03:05 GMT

Hello Jean,

Okay lets say the SQL server is 192.168.10.10

so please configure the following

object network Inside_server

host 192.168.10.10

object service SQL

service tcp source eq 3306

nat (inside,outside) 2 source static Inside_server interface service SQL SQL

access-list outside_access_in permit tcp any host 192.168.10.10 31 3306

packet-tracer input outside tcp 4.2.2.2 1025 212.147.49.18 3306

Let me know, if this does not work please post the configuration updated

Re: ASA5505 port 3306 request discarded

stalwartweare — Mon, 22 Oct 2012 15:22:17 GMT

thanks for your help.

attached is the new configuration and the packet trace, no success

Re: ASA5505 port 3306 request discarded

Julio Carvajal — Mon, 22 Oct 2012 16:57:11 GMT

Missing the outside acl

access-group outside_access_in in interface outside

Regards

Re: ASA5505 port 3306 request discarded

stalwartweare — Mon, 22 Oct 2012 18:15:58 GMT

added the line, same problem

regards

Re: ASA5505 port 3306 request discarded

Julio Carvajal — Mon, 22 Oct 2012 18:29:46 GMT

Packet-tracer please ( the complete output)

Re: ASA5505 port 3306 request discarded

stalwartweare — Tue, 23 Oct 2012 10:58:18 GMT

here you are

thanks for your help

Re: ASA5505 port 3306 request discarded

Julio Carvajal — Tue, 23 Oct 2012 16:30:24 GMT

Hello Jean,

Just checked the config, the problem is that you did not follow the object service configuration I sent you.

Mine:

object service SQL

service tcp source eq 3306

Yours:

object service SQL

service tcp destination eq 3306

Please change that and let me know,

Remember to rate all of the helpful posts, that is as important as a thanks for the community ( if you need to know how to rate a post, just let me know, I will be more than glad to let you know )

Re: ASA5505 port 3306 request discarded

stalwartweare — Thu, 25 Oct 2012 13:19:38 GMT

hello,

I changed the object as mentionned, the packet tracer is now allowing the flow. I will conductreal tests.

thanks a lot for your help.

please tell me how to rate the post

Re: ASA5505 port 3306 request discarded

Julio Carvajal — Thu, 25 Oct 2012 16:56:25 GMT

Hello Jean,

It should be working now We finally did it

Now in order to rate a post, go to each of my replies and mark or select the 5 stars at the bottom of each reply,

Regards,

Julio