Inbound access - PIX 501

[pencarrie]

I have a requirement to allow an external server to forward requests on port 2799 (ODBTP) to a local server behind our PIX-501.

I've attempted to do this but all I manage to do is block all outbound access to the Internet!

Any help would be great, thanks

[umedryk]

you can either user conduit permit or use access-lists.

[pcomeaux]

You will need to setup a translation for this port using the following command (assuming TCP):

static (inside,outside) tcp OUTSIDE-IP 2799 INSIDE-IP 2799 netmask 255.255.255.255

Then you need to allow access from the outside in.

access-list OUTSIDE permit tcp any host OUTSIDE-IP eq 2799

Then you need to apply the access-list to an interface:

access-group OUTSIDE in interface outside

Then perform a "clear xlate" and test.

Let us know if this helps or not, Be sure to change the IP references above to your IP ranges.

peter