Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
HTTP Access to DMZ server
NOTE - called Cisco TAC. Documenation on p14 of Quick Start Guide is incorrect. You need to allow any source to http destination. The documentation show it the other way around which will never work because source port is always random.- rasoft
- Post #3
- Forum: Security, hacker detection & forensics
-
HTTP Access to DMZ server
NOTE: If I change the source port on the access-list rule to any and destination http it works. Would that create a secruity problem?- rasoft
- Post #2
- Forum: Security, hacker detection & forensics
-
HTTP Access to DMZ server
Hi, I have added a web server to DMZ interface 172.100.3.1. Web server address is 172.100.3.2. I have added static nat from 172.100.3.2 to external ip, lets say 99.99.99.99 I have created an access list giving outside (any)to dmz http access to the host. access-list outside_access_in; 1...- rasoft
- Thread
- Replies: 2
- Forum: Security, hacker detection & forensics
-
Cisco access-list help
resolved now. Config t from telnet, then paste in config changes. It was my telnet client causing issues. Would be interest in anyway to amend access list and order without reapplyig the whole lot back. -
High Exec CPU/DoS
Why could a router have 6 separate exec processes running using 90% CPU. Its seems to relate to 6 tty connections. What are tty connections? It seems to be causing the internet connection to fail. Serial interface and proto are still up. could this be Dos? -
Cisco access-list help
Hi, I want to add a new entry to an access-list but it puts it at the bottom. I can create a new config file and re-run from hyper terminal and it adds it correctly from my new config file (send text file). If i telnet to the router since i dont have serial terminal access how can I replay...
