ICQ and windows messenger problem with PAT

[alexis.fidalgo]

I have a 501 with pat configured, my lan is being nat'ed to the outside interface IP, i've configured pat for a machine in the lan to listen the ftp connections, and other machine to listen the terminal services connections.

It works fine.

But i got a problem with some applications, like icq and msn, when im trying to send file trough them, should i configure a static pat entry for every port for the file transfer?

This cannot be achieved via statefull actions by the pix?

[kmarrero]

The best thing would be to set up static entries and configure access-lists to allow the return traffic. I am sure that this would not be feasible so you may want to look at this URL to see if configuring ICQ will help. http://www.icq.com/icqtour/firewall/netadmin.html