inside to dmz access or domain based access
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-25-2004 03:33 PM - edited 03-09-2019 07:51 AM
i have a cisco pix 525with a inside and dmz interface. there are 2 mail servers. one mail server is on the dmz interface and the other is in the inside interface. i have applied alias command for local resolution.but now when i try to ping the dmz servers with the domain name or public ip of that server its not responding. with the internal IP, its possible.im using conduits, not access-lists.i have heard that this trust is possible but im not so sure abt that and also i want to know whether i can use a combination of conduit with access-lists.
can anyone guide me for the same.
thanks in advance.
ramesh
- Labels:
-
Other Security Topics
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-30-2004 06:33 AM
Try this test: telnet dmz-mail-server-name 25
where dmz-mail-server-name is the hostname - and then do the same with the public ip address. Let me know if you get a telnet connection on port 25, you should see the smtp or esmtp banner screen. If you get the banner, then the issue is the acls and/or conduits with respect to icmp.
Let me know how the tests go.
