Major trouble using PDM

[staboogie]

Does anyone know why i keep getting the error message "PDM does not support multiple users of a given access control list"? I took out my conduits so I could get a look at the PDM and don't know what this can be.

 

[staboogie]

I forgot to mention that I have 2 access-lists running on this pix, one of them is setup for my VPN connection, I converted the old conduits that were in the Pix for the other access list.

 

[yizhar]

HI.

Do not bound the same access-list to more then one interface, or to more then one function.
Use different access-list for interface rules, vpn traffic, nat 0, split tunnel, etc...


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[staboogie]

I thought that was what i have. That's the reason I have 2 access lists. can someone let me know what needs to change in these?

access-list 103 permit icmp any any
access-list 103 permit gre any any
access-list 103 permit tcp any host exchange eq smtp
access-list 103 permit tcp any host exchange eq pop3
access-list 103 permit tcp any host exchange eq domain
access-list 103 permit tcp any host exchange eq www
access-list 103 permit tcp any host exchange https
access-list 103 permit tcp any host mx1 eq smtp
access-list 103 permit tcp any host mx1 eq domain
access-list 103 permit tcp any host mx2 eq smtp
access-list 103 permit tcp any host mx2 eq domain
access-list 103 permit tcp any host 12.14.112.x eq 1723
access-list 103 permit tcp any host 12.14.112.x eq 1723
access-list 103 permit tcp any host 12.14.112.x eq https
access-list 103 permit tcp host 164.109.44.x host 12.14.112.x
access-list 103 permit tcp host 164.109.44.24 host 12.14.112.x eq 1433
access-list 103 permit tcp host 12.14.112.109 host 12.14.112.x
access-group 103 in interface outside

and this for our VPN
access-list 102 permit ip 192.168.10.0 255.255.255.0 192.168.1.0 255.255.255.0
nat (inside) 0 access-list 102

do I have to split up acl 103?