Access problem to Web server behind a PIX

[ericavar]

Hi,

I have a problem with a PIX firewall 501 6.3.4

When I try to access to a web server located behind the secure interface, the connection hangs.

I put a sniffer (Ethereal) on my computers (2 for the test).

I can see a lot of [PSH,ACK], [TCP previous segment lost], [TCP DUP ACK] on one of them and the connection needs almost 5 minutes.

On the second one, just [PSH,ACK] and the connection is made after one or two minutes.

When I try to access a similar Web server on another network with another PIX as firewall, the traces don't show any PSH or DUP ACK.

I'm trying to find informations about changing TCP/IP parameters on the Web server but I dont know where to search.

Any help will be appreciated.

Regards.

[a.alekseev]

Is your configuration on the PIX correct?

[ericavar]

I hope !

One thing is not regular. The internal IP address are public adresses (128.x.x.x)... and my customer cannot change them for the moment.

Here is some of my configuration :

access-list outside_access_in permit tcp any interface outside eq 2080

static (inside,outside) tcp interface 2080 inside_web_server 2080 netmask 255.255.255.255 0 0

access-group outside_access_in in interface outside

I don't thing I need much more to make the access work to inside.

Do you want the entire configuration ?

Regards