Hi there,
I have an ASA 5520 with a DMZ with private addresses that I SNAT to my outside network.
From inside the DMZ I can reach servers by both the internal private IP and the public IP, except if the IP is from the server trying to connect.
So, say I have server1 and server2. I can connect from server1 to server 2 with both public and private, but can't connect from server1 to server1' using the public IP.
ASA logs show that packets are being denied due to land attack.
DNS doctoring is not an option for me.
Is there a way to fix this?
Thanks.