PIX Log

[DNATA]

Hi All

One of the PC in the remote branch is trying to contact a Host in the inside network . Its bascially a telnet software which the client initiates to the host, This is not working. So from the command prompt when you try to telnet to the host , it eventually dies out. All the rules on the PIX firewall seems to be OK. Infact IP is opened between the host & the client and also there is a static transalation entry ,

So its a client from the outside interface not able to access the host on the internal interface.

The error log am getting is as below

106015: Deny TCP (no connection) from Out_IP Address/23 to In_IP Address/1174 flags SYN ACK on in

terface inside

We have changed the machine, changed the IP address & still no luck.

Cisco says that recommended action is NONE in its syslog messages

So wht do i do now ?

Pls Help

Thanks in Advance

Jim

[a.awan]

Your Deny TCP message looks a bit wierd. Are you sure that the Out_IP Address/23 appears first or did you make a typo while sanitizing the message?

Can you post relevant portions of your configuration so we can take a look at it? Make sure you include any ACLs bound to both inside and outside interface. Also please provide your static definitions.