I recently took over a client with an ASA 5505 ver. 8.2 device and need some help configuring, as I'm unfamiliar. I've done as much Google-fu as I could, and came up with these rules, but here is the situation:
Client has an ISP supplied modem/router in BRIDGE mode w/ (1) static IP to the ASA 5505. There is one internal network segment 192.168.1.x, and one DMZ 192.168.2.x. The machine on the DMZ needs FTP access from the outside, and complete access from inside.
I know this is a relatively simple configuration, but as a "freshman" in this area (mostly a developer), I figured I'd ask advice!
Anyway:
green = inside
red = outside
orange = DMZ
{---
nat (green) 1 192.168.1.0 255.255.255.0
nat (orange) 1 192.168.2.0 255.255.255.0
global (red) 1 75.131.x.x interface
access-list DMZ permit ip host 192.168.2.1 192.168.1.0 255.255.255.0
**allow IP traffic from FTP server to internal subnet
access-list DMZ deny ip any any
access-list INTERNAL permit tcp any host 192.168.2.1 eq 21
**users inside can access FTP server
access-list INTERNAL permit ip 192.168.1.0 255.255.255.0 any
**users inside can access any other network
access-list INTERNAL permit ip 192.168.1.0 255.255.255.0 75.131.x.x 255.255.255.252
**users inside can access external interface
access-list INTERNAL deny ip any any
access-list EXTERNAL permit tcp any 75.131.x.x eq 21
**permit any host on the outside to access the FTP server
access-list EXTERNAL deny ip any any
---}
Thanks for any advice you can provide.
