Stopping an ip in PIX 515 ver 4.4.

[g.yermn]

I want to stop traffic for one ip address explicitily.

I used :

conduit deny tcp host my_ip host outside_ip eq 80 any

but it didn't work.

What else can I try?

[rsnider]

Asuming that you wish to perevent 'outside_ip' from having web access to 'my_ip' your command should work. Did you use the "clear xlate" command after adding or deleting the conduit? Also check your conduits to see if another conduit overrides this one. Conduits are executed in the order entered into the configuration.

Ron

[g.yermn]

Yes, I used "clear xlate" and I rebooted the pix too, but it doesn't work.

This rule is the first in the configuration.

I'm upgrading to 6.0 now to see what happens.