PIX 515e - cannot view site from inside

[stevensavage]

hi folks

I have a PIX 515E with a webserver in the DMZ. Using a static command it is on the web with an internet address and can be viewed from anywhere outside the firewall. But users inside cannot view it, by ip address or domain name. Would be grateful for any help on an access list for this

Thanks

[mike-greene]

Hi,

1. Try putting a static from the DMZ to Inside using the inside subnet...

static (inside,DMZ) netmask

2. Are you using ACL's or conduits? If you are then make sure your not blocking access to that server.

Hope that helps.

[stevensavage]

Hey there

1 - Have this already in place

2 - Using ACLS. I can access the website on the webserver from the lan using its DMZ address, but not its internet address. And i don't want to setup a www DNS entry for it locally to the DMZ because it should work the other way!

Thanks

[mike-greene · Accepted solution]

Woops...

I did not understand how you wanted this setup...

This should work....

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aee.shtml#dmz

[stevensavage]

That will do the job nicely Mike - Thanks for your prompt help