topic Re: Pix 506 in Network Security

Pix 506

don.whitley — Fri, 21 Feb 2020 05:53:40 GMT

configuring Pix 506 using IOS 6.1 I'm able to access the internet inside out, and I can access my web site from the outside only by IP address not by name ie. www.mydomain.com. Also I'm not able to recieve mail. Config lines that I'm using any suggestions

access-list outside_access_in permit tcp any host 192.168.1.2 eq smtp

access-list outside_access_in permit tcp any host 192.168.1.2 eq 81

access-list outside_access_in permit tcp any host 192.168.1.19 eq 888

static (inside,outside) tcp interface smtp 192.168.1.2 smtp netmask 255.255.255.255 0 0

static (inside,outside) tcp interface 81 192.168.1.2 81 netmask 255.255.255.255 0 0

static (inside,outside) tcp interface 888 192.168.1.19 888 netmask 255.255.255.255 0 0

conduit permit ip any any

Re: Pix 506

travis-dennis_2 — Mon, 05 Nov 2001 04:03:31 GMT

How are you doing DNS? Are all pc's are having the same problem? What OS?

Re: Pix 506

don.whitley — Mon, 05 Nov 2001 04:13:23 GMT

on the inside network they work fine if I leave the "www" off but from the outside it don't work at all . Using Windows 2000

Re: Pix 506

elehman — Sat, 10 Nov 2001 03:03:52 GMT

This sounds like one of those "I setup Windows 2K with DNS inside my network and I'm assuming that the rest of the world can see it" syndrome. Your internal users are looking at your internal DNS - which lists your domain. It does not sound like you have DNS out on the internet, as well as not having a zone entry in your internal DNS for the WWW alias. Basically, just because you have internal DNS listing your domain does not mean the rest of the world can see it. If you have not registered the domain with NSI and do not have someone like an ISP hosting your domain records, you will not get anything from the outside. Simple enough? You need an MCSE, not a CCIE.