topic Re: ping (PIX) nside server by name ? in Network Security

ping (PIX) nside server by name ?

iqbalkhan — Fri, 21 Feb 2020 08:33:03 GMT

I have a pix firewall.

inside Ip address 10.10.10.12

dmz ip address 192.168.25.1

In inside have file server

ip address: 10.10.10.101

name:fserver

DNS server:10.10.10.83

----------------------

In DMZ has user and pc address 192.168.25.30

now I want dmz user ping inside file sever by name.

for this I configure in firewall.

static(inside,dmz) 192.168.25.83 10.10.0.83 (for dns)

static(inside,dmz) 192.168.25.101 10.10.0.101 (for fserver)

name 10.10.10.101 fserver

and also allow icmp ,tcp and udp

-----------------------------------

in dmz zone user use DNS IP:192.168.25.83

Result::::

now i can access the file server and ping from dmz user pc

ping 192.168.25.101 and access \\192.168.25.101

and also i can ping fserver successfully from inside any pc.

but when i want ping fserver from dmz pc

then get reply request time out from ferver and it shows its ip address 10.10.10.101

for information i can telnet dns server from dmz

now my requirement is how DMZ user can access file server name with also IP

address.

pls solve this problem with onfiguration

Thanks

biplob

jackko — Mon, 28 Nov 2005 10:50:22 GMT

the dns server response has the server original ip, and that's why the ferver = 10.10.10.101.

i suggest you to disable nat between the inside and the dmz.

e.g.

static (inside,dmz) 10.10.10.0 10.10.10.0 netmask 255.255.255.0

static (dmz,inside) 192.168.25.0 192.168.25.0 netmask 255.255.255.0

iqbalkhan — Tue, 29 Nov 2005 07:03:33 GMT

pls briefly explian to me.

i disable nat and give the command

static (inside,dmz) 10.10.10.0 10.10.10.0 netmask 255.255.255.0

static (dmz,inside) 192.168.25.0 192.168.25.0 netmask 255.255.255.0

i need solve this problem

thanks

Biplob