can I get IP directed broadcast inbound through a PIX

[sandow]

I have a market data vendor who continues to insist on using directed broadcast. I need to put their circuit outside a firewall. Can I do something like:

static (inside,outside) ftp 65.220.255.255 10.1.255.255 netmask 255.255.255.255 0 0

Along with an appropriate access list. Then have them send the directed broadcast to 65.220.255.255, and the PIX translate it to 10.3.255.255 so it gets to my internal users on the 10.1 subnet. Will this work?

Rob

[steve.barlow]

Yes, I think I had the same market data vendor (starts with IL*) tell me the same thing, and yes it does work. I configured it and it was no problem (was between my DMZ and internal network).

Steve

[sandow]

BTW, there should not be an "ftp" in the static command. I copy/pasted from elsewhere and didn't remove it by mistake.

Rob