Passing Port 80

[abovebrd]

What would be the correct way to pass requests for port 80 to an internal web server.

I did the follwong

fixup protocol http 80
static (inside,outside) 111.111.111.111 192.168.20.20 netmask 255.255.255.255
conduit permit tcp host 111.111.111.111 eq 80 any
conduit permit udp host 111.111.111.111 eq 80 any

However it does not seem to work. The internal machine (192.168.20.20) is a windows 98 machine running web mail.
I am not sure what i missed or where I should go from here ?

-Danny

 

[rdoucet]

Is there an access-list in there? If so, you need to add the port to the list.

Access-list 100 permit tcp any host 111.111.111.111 eq www

 

[8dstaicu]

For a simple web server it's right what have you done.
But, maibe, your web mail use another port beside 80 and Pix cannot extract from http trafic the needed port.
You must look to syslog meesages that pix gives you.
You must look for some deny messages.

 

[abovebrd]

It actually did work. I am not able to view the site on my internal network. (That is from the registered IP)
If I view it from an external IP it works perfectly




-Danny

 

[rdoucet]

Oh, for that you would have to use the internal IP address of 192.168.20.20. We set ours in the internal DNS server so we could type the web address.

 

[abovebrd]

unfortunatly we do not have an internal DNS server.
We have a crappy WINS server.

-Danny