IP Port forwarding

[abovebrd]

I need to open port 617 on my PIX 515 firewall. I am using ARKEIA to back up several Unix servers. In order for the Backup to work I must open up port 617 on the firewall.

So I have two questions:

1. How do I open up port 617
conduit permit tcp host xxx.xxx.xxx.xxx eq 617 any
or instead of any could I use an IP address ?

2. How do I set up the IP forwarding ? I need all requests received on port 617 of the firewall to forward to be internal backup server (Behind NAT 192.168.x.x)

Thank you in advance

-Danny

 

[abovebrd]

I figured it out

static (inside,outside) x.x.x.x 192.168.x.x netmask 255.255.255
conduit permit tcp host x.x.x.x eq 617 host any

x.x.x.x is the reg. IP for NAT to use on the outside interface.

note: this also allows any host to connect to port 617 on x.x.x.x
I could also use a specific IP if I want restrict access to just that host.


-Danny