I feel like a Ferengi with a Photon Torpedo

[TimV]

All I want to do is allow outside users from unknown IP's to access an ftp server on my network.

I thought I needed to add:
static xxx.xxx.xxx.241 192.168.1.21
(x's being my real IP, my ftp server is on 192.168.1.21)

access-list acl_outside permit ftp any host 192.168.1.21 eq ftp

When I add the "static" line, all my PC's that are allowed out lose their ability to connect to the internet.

I only have one IP, I don't allow anything in yet... this is the first time trying to set up a path into a server.

I thought being lame meant my leg would hurt....????

 

[mst3k]

If you are using one ip address for outside access, you specify 'interface' instead of your external ip. And your access list permits ftp access from the outside interface like this:

access-list 100 permit tcp any host [external ip] eq ftp
static (inside,outside) tcp interface ftp [internal ftp server] ftp

 

[TimV]

The two lines work perfectly. Thanks for such a quick reply!