I have a PIX 515-E w/ver. 6.2(2) (asking for a new one for x-mas) - the configuration I inherited included statics and conduits. Yes, I know I'm supposed to convert these to ACL's but unfortunately, I can't get the ok for the down time.
Meanwhile, we're doing a conversion of a system on 'a' dmz-ish - it's a weird setup here - this firewall isn't actually outside, it's between internal network and several wireless networks. We need everything to stay the same, but to be able to pass traffic from the wireless network to the inside and back again, we also need to pass ssh traffic to another server and back again - for the same project.
If I try to hit the server via http to the ip address it works, so I know I'm getting there - if I try to do it with the name - no go.
When I looked at the log, it told me that there was no translation group for udp 53, so I added that as well, with no luck.
Here's some of my antiquated config - as you'll see in the config, the traffic doesn't seem to be hitting the conduit at all... any assistance would be greatly appreciated. Thanks in advance.
static (inside,vlan3) 10.199.66.60 10.195.66.60 netmask 255.255.255.255 0 0
conduit permit tcp 179.254.190.0 255.255.255.0 eq https host 10.199.66.60 (hitcnt=0)
conduit permit tcp host 10.199.66.60 eq https 179.254.190.0 255.255.255.0 (hitcnt=0)
static (inside,vlan3) 10.102.13.10 10.102.13.10 netmask 255.255.255.255 0 0
conduit permit tcp 179.254.190.0 255.255.255.0 eq domain host 10.102.13.10 (hitcnt=0)
conduit permit tcp host 10.102.13.10 eq domain 179.254.190.0 255.255.255.0 (hitcnt=0)
conduit permit udp 179.254.190.0 255.255.255.0 eq domain host 10.102.13.10 (hitcnt=0)
conduit permit udp host 10.102.13.10 eq domain 179.254.190.0 255.255.255.0 (hitcnt=0)
Note:
nameif ethernet0 vlan3 security0
nameif ethernet1 inside security100
Is there a fixup I should be using?
Sign me,
Grasping @ Straws
