PIX firewall port mapping

parker.c — Fri, 21 Feb 2020 07:20:37 GMT

Working with a PIX running 6.1.3 and am trying to map tcp 7373 on an outside IP to telnet on an inside machine. I tried the following:

static (inside,outside) tcp 216.26.172.212 7373 198.135.95.2 telnet netmask 255.255.255.255 0 0

conduit permit tcp host 216.26.172.212 eq 7373 any

But for some reason this doesnt work.When I use the standard telnet port on both inside and outside it works fine. What am I missing here?

Re: PIX firewall port mapping

ehirsel — Wed, 14 Apr 2004 15:35:40 GMT

According to the cisco doc for pix 6.1 code, if you use statics you must use acls. See if you can remove the conduit and instead configure the following:

access-list outside_acl_01 permit tcp any host 216.26.172.212 eq 7373

access-group outside_acl_01 in interface outside

Then try your telnet to port 7373 of the 216.26 address.

topic PIX firewall port mapping in Network Security

PIX firewall port mapping

Re: PIX firewall port mapping