cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
5
Helpful
2
Replies

MSN messenger

thaier1978
Level 1
Level 1

Hi,

I have PIX 515E firewall and I have some web pages did not displayed after the PIX.

, for Example:

after I sign in hotmail account the page of my email do not display.

and also the MSN messenger is not working, and I appreciate if you can help me to get it work.

MY access-list s are:

permit tcp any any eq pop3

permit tcp any any eq domain

permit udp any any eq domain

permit tcp any any eq www

permit tcp any any eq telnet

permit tcp any any eq h323

permit tcp any any eq 1863

permit tcp any any eq ftp-data

permit tcp any any eq ftp

Thank you

Thaier

2 Accepted Solutions

Accepted Solutions

Patrick Iseli
Level 7
Level 7

For hotmail add HTTPS, remove TCP DNS if you do not have zone transfers from a internal DNS server.

permit tcp any any eq 443

This access-list is applyed on the inside interface right ?

Waht version of the PIX OS are you using and what are the fixup protocols ?

sincerely

Patrick

View solution in original post

sachinraja
Level 9
Level 9

Hi Thaier,

you need to add access to port 443 to your access-list.

access-list inside permit tcp any any eq 443

Try putting a restricted access-list as far as possible.. do not use any any.. try something like

access-list inside permit tcp 192.168.1.0 255.255.255.0 any eq 443

hope u got it.

Raj

View solution in original post

2 Replies 2

Patrick Iseli
Level 7
Level 7

For hotmail add HTTPS, remove TCP DNS if you do not have zone transfers from a internal DNS server.

permit tcp any any eq 443

This access-list is applyed on the inside interface right ?

Waht version of the PIX OS are you using and what are the fixup protocols ?

sincerely

Patrick

sachinraja
Level 9
Level 9

Hi Thaier,

you need to add access to port 443 to your access-list.

access-list inside permit tcp any any eq 443

Try putting a restricted access-list as far as possible.. do not use any any.. try something like

access-list inside permit tcp 192.168.1.0 255.255.255.0 any eq 443

hope u got it.

Raj