topic Re: PIX 515 Question about mail server behind inside in Network Security

PIX 515 Question about mail server behind inside

peterhkim — Fri, 21 Feb 2020 08:41:05 GMT

I have a question about putting mail server behind inside interface using static command. It seems like works fine. However, I get "incomplete" message when I looked at PDM config since I put access rule sourcing and destination on the same interface. Is there any other way to do this?

I am translating public address to inside address using static command.

Let me know if you need more info.

Thanks.

Re: PIX 515 Question about mail server behind inside

pkhatri — Tue, 31 Jan 2006 22:21:32 GMT

Hi Peter,

A bit of you relevant config would help.

Paresh

Re: PIX 515 Question about mail server behind inside

peterhkim — Wed, 01 Feb 2006 13:42:04 GMT

This is the config I have for my mail server.

access-list outside_access_in extended permit tcp any host 65.10.127.4 eq www

access-list outside_access_in extended permit tcp any host 65.10.127.4 eq smtp

static (inside,outside) 65.10.127.4 10.10.10.5 netmask 255.255.255.255

thanks.

Re: PIX 515 Question about mail server behind inside

peterhkim — Wed, 01 Feb 2006 15:07:42 GMT

This is the config I have for my mail server.

access-list outside_access_in extended permit tcp any host 65.10.127.4 eq www

access-list outside_access_in extended permit tcp any host 65.10.127.4 eq smtp

static (inside,outside) 65.10.127.4 10.10.10.5 netmask 255.255.255.255

thanks.