<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: PIX REDIRECT in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/pix-redirect/m-p/504217#M529935</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;just wondering if you are referring to configure inbound access to webserver (or email server) that is located in the pix inside net.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;e.g.&lt;/P&gt;&lt;P&gt;www &amp;lt;--&amp;gt; pix &amp;lt;--&amp;gt; webserver (or email server)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;if the above simplified topology is accurate, then it depends on the number of public ip.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;for one public ip,&lt;/P&gt;&lt;P&gt;static (inside,outside) tcp interface 80 &lt;WEBSERVER private="" ip=""&gt; 80 netmask 255.255.255.255&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;static (inside,outside) tcp interface 25 &lt;EMAIL server="" private="" ip=""&gt; 25 netmask 255.255.255.255&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any interface outside eq 80&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any interface outside eq 25&lt;/P&gt;&lt;P&gt;access-group inbound in interface outside&lt;/P&gt;&lt;P&gt;clear xlate&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;for multiple public ips,&lt;/P&gt;&lt;P&gt;static (inside,outside) &lt;WEBSERVER public="" ip=""&gt; &lt;WEBSERVER private="" ip=""&gt; netmask 255.255.255.255&lt;/WEBSERVER&gt;&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;static (inside,outside) &lt;EMAIL server="" public="" ip=""&gt; &lt;EMAIL server="" private="" ip=""&gt; netmask 255.255.255.255&lt;/EMAIL&gt;&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any &lt;WEBSERVER public="" ip=""&gt; eq 80&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any &lt;EMAIL server="" public="" ip=""&gt; eq 25&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-group inbound in interface outside&lt;/P&gt;&lt;P&gt;clear xlate&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 05 Dec 2005 12:47:02 GMT</pubDate>
    <dc:creator>jackko</dc:creator>
    <dc:date>2005-12-05T12:47:02Z</dc:date>
    <item>
      <title>PIX REDIRECT</title>
      <link>https://community.cisco.com/t5/network-security/pix-redirect/m-p/504216#M529933</link>
      <description>&lt;P&gt;is it possible to redirect traffic like http or smtp to a speficif IP? I have a Cisco Pix 515E. Thanks.&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 08:34:15 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/pix-redirect/m-p/504216#M529933</guid>
      <dc:creator>edimonte1980</dc:creator>
      <dc:date>2020-02-21T08:34:15Z</dc:date>
    </item>
    <item>
      <title>Re: PIX REDIRECT</title>
      <link>https://community.cisco.com/t5/network-security/pix-redirect/m-p/504217#M529935</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;just wondering if you are referring to configure inbound access to webserver (or email server) that is located in the pix inside net.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;e.g.&lt;/P&gt;&lt;P&gt;www &amp;lt;--&amp;gt; pix &amp;lt;--&amp;gt; webserver (or email server)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;if the above simplified topology is accurate, then it depends on the number of public ip.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;for one public ip,&lt;/P&gt;&lt;P&gt;static (inside,outside) tcp interface 80 &lt;WEBSERVER private="" ip=""&gt; 80 netmask 255.255.255.255&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;static (inside,outside) tcp interface 25 &lt;EMAIL server="" private="" ip=""&gt; 25 netmask 255.255.255.255&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any interface outside eq 80&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any interface outside eq 25&lt;/P&gt;&lt;P&gt;access-group inbound in interface outside&lt;/P&gt;&lt;P&gt;clear xlate&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;for multiple public ips,&lt;/P&gt;&lt;P&gt;static (inside,outside) &lt;WEBSERVER public="" ip=""&gt; &lt;WEBSERVER private="" ip=""&gt; netmask 255.255.255.255&lt;/WEBSERVER&gt;&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;static (inside,outside) &lt;EMAIL server="" public="" ip=""&gt; &lt;EMAIL server="" private="" ip=""&gt; netmask 255.255.255.255&lt;/EMAIL&gt;&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any &lt;WEBSERVER public="" ip=""&gt; eq 80&lt;/WEBSERVER&gt;&lt;/P&gt;&lt;P&gt;access-list inbound permit tcp any &lt;EMAIL server="" public="" ip=""&gt; eq 25&lt;/EMAIL&gt;&lt;/P&gt;&lt;P&gt;access-group inbound in interface outside&lt;/P&gt;&lt;P&gt;clear xlate&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 05 Dec 2005 12:47:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/pix-redirect/m-p/504217#M529935</guid>
      <dc:creator>jackko</dc:creator>
      <dc:date>2005-12-05T12:47:02Z</dc:date>
    </item>
  </channel>
</rss>

