time to read about fixup protocol ftp.
standard ftp on a non standard port wont be easy to get working. if it was on a standard port, the fixup protocol ftp would help you. you can try using passive ftp and open the other port which is usually 1024, but you might want to look that up as well.
Do you want the internal hosts to use the valid external ip?
if so :
global (outside) 1 <outside_addr> <netmask>
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
This will allow all internal hosts to use the public ip on the outside.
conf t
icmp permit 0 0 outside
icmp permit 0 0 inside
or replace 0 0 with specific ip/host netmask
icmp ? will show the usage if you want to use specific icmp types
to test for connection I try connecting to the ports opened in the acl's. i have tryed to connect with a web browser, rdp, ftp, ssh, telnet, http on non standard ports.
all of the gateways are set correctly. whether i use a live machine or a test machine its all the same.
It works fine on ip's...
I have eliminated dns issues by trying to connedt using the public ip that the firewall converts to the private ip.
I can connect fine on any internal ip with no problem. It is only when i try to connect to ip's that have a domain name attached to them that there is no connection.
Hi, I have configured a PIX 520 for my server room and all works fine except for the sites that have domain names registered to them. All of the static entries and conduits are good, but are not allowed access in or out of the pix.
Any of the ip's that dont have domain names are working fine in...
Hi, I have configured a PIX 520 for my server room and all works fine except for the sites that have domain names registered to them. All of the static entries and conduits are good, but are not allowed access in or out of the pix.
Any of the ip's that dont have domain names are working fine in...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.