topic Re: Access List Problem? in Network Security

Access List Problem?

djemba-djemba — Mon, 11 Mar 2019 15:09:38 GMT

Dear All,

I have an ASA 5510 and suppose it already had some access-list setting, in fact, it works normally.

However, now, I want to add a permission from my internal network to a server in the internet which use the specific port let said 5000.

I have already added a permit access rule from any to any and set the 5000 ports as the allow action on both inside and outside interface.

However, I can not access the service port 5000 from my internal network to the server but I can reach it from other PC in the internet.

What is the problem do you think, suppose any any should allow all the traffic of the said port.

Do you think it is the problem of inspection service from the ASA?

Thanks for your attention

Djemba

andrew.prince — Wed, 25 Mar 2009 09:18:56 GMT

The issue could be that the server will not accept connections from your outside IP address.

Or it could be the NAT in your ASA is incorrect.

I suggest you debug a connection attempt.

HTH>

djemba-djemba — Wed, 25 Mar 2009 16:52:31 GMT

Hi Andrew,

Thanks your suggestion.

I found something after carefully to read the log.

It should be the problem of the packets exceeded the message size and dropped by my firewall.

Fixed

Thanks