https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309897#M593022 <P>Hi, I have a Linux server that fetches a file via FTP from a server located on Internett. And each time my PIX sends a syslog message looking something like this:</P><P></P><P>Apr 29 12:25:43 10.0.0.1 %PIX-4-106023: Deny tcp src outside:129.242.28.57/21 dst inside:62.101.252.32/55198 by access-group "outside_access_in"</P><P></P><P>Why is the remote server trying to connect back to me?</P> Fri, 21 Feb 2020 07:22:22 GMT 2pat 2020-02-21T07:22:22Z https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309897#M593022 <P>Hi, I have a Linux server that fetches a file via FTP from a server located on Internett. And each time my PIX sends a syslog message looking something like this:</P><P></P><P>Apr 29 12:25:43 10.0.0.1 %PIX-4-106023: Deny tcp src outside:129.242.28.57/21 dst inside:62.101.252.32/55198 by access-group "outside_access_in"</P><P></P><P>Why is the remote server trying to connect back to me?</P> Fri, 21 Feb 2020 07:22:22 GMT https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309897#M593022 2pat 2020-02-21T07:22:22Z https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309898#M593023 <HTML><HEAD></HEAD><BODY><P>ftp generally uses two connections at once - control commands and data. </P><P></P><P>what does you outside_access_in access list look like?</P></BODY></HTML> Thu, 29 Apr 2004 10:29:02 GMT https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309898#M593023 mostiguy 2004-04-29T10:29:02Z https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309899#M593024 <HTML><HEAD></HEAD><BODY><P>I have:</P><P></P><P>fixup protocol ftp 21</P><P></P><P>access-list outside_access_in permit tcp any interface outside eq www </P><P>access-list outside_access_in permit tcp any interface outside eq 6300 </P><P>access-list outside_access_in permit tcp any interface outside eq 9000 </P><P>access-list outside_access_in permit tcp any interface outside eq 5060 </P><P>access-list outside_access_in permit tcp any interface outside eq 5004 </P><P>access-list outside_access_in permit udp any interface outside eq 5060 </P><P>access-list outside_access_in permit icmp any any unreachable </P><P>access-list outside_access_in permit icmp any any echo-reply </P><P>access-list outside_access_in permit icmp any any time-exceeded </P><P></P><P>I tought the fixup should take care of the return ports?</P></BODY></HTML> Thu, 29 Apr 2004 11:17:29 GMT https://community.cisco.com/t5/network-security/pix-ftp-syslog/m-p/309899#M593024 2pat 2004-04-29T11:17:29Z