Allowing a connection from outside

[dave.cook]

I have a PIX 506e firewall. I have one public IP which is assigned to the outside interface.

I have already allowed smtp traffic from the outside to my mail server in the LAN. To do this I created a static NAT translation and the appropiate access list and access group statement. This is all working fine.

Now I want to be able to allow my external users access to my IIS server that host Outlook Web Acess. This is on the same mail server. The iis server is waiting on port 2001, so i have done the following

created another static nat for the web services on port 2001 to the mail server and added to the existing access list statement to allow traffic on port 2001 to go to the mail server running iis.

I also added a fixup statement for http for port 2001. I wasnt sure if i needed that?

The problem is that smtp still comes in fine but the OWA access wont.

Do I need another public IP for this service to work??

TIA

Dave

[syghafoor]

Pix doesn't map the ports, it can only redirect it, so the following command won't work.

static (inside, outside) tcp interface 80 10.1.1.15 2001

other then that it should work the way you have configured unless there is a software bug. I suggest that you open up a case with cisco TAC.

I hope this helps.

Thanks,

Syed