Pix 515e Outbound ACL?

[somascope]

Hey all,

I have a bit of a problem so again I will turn to the wisdom of tek-tips.com. I recently changed my ISP and with the input from boymarty24 I was able to get my Cisco config right and all is well. Well, almost everything. Before on my prior ISP with the same ACLs I was able to access a remote server via ftp. Now on my new ISP I am unable to do so. My new ISP has assured me that they are not blocking any traffic and that it must be my config, but since I don't have an outbound ACL and never did I am curious as to how my Pix could be messing up this traffic. If anyone has any ideas I would surely appreciate it. If you need me to post any chunks of my config please let me know.

Thanks!

 

[baddos]

show run access-group

That will show you if you have any access-lists bound to your Inside interface. If there is, look at that access list and see if you see anything funny.

 

[somascope]

There are currently no acls bound to my inside interface. I do have acls bound to my outside interfaces but those shouldn't effect my outbound traffic right?

 

[Supergrrover]

Make sure that you have FTP in your inspection list.

fixup protocol ftp

Without it, only passive ftp will work outbound.



Brent
Systems Engineer / Consultant
CCNP

 

[somascope]

Awesome Supergrrover,

Thanks that seemed to do the trick. I knew it had to be something simple that I just didn't know about. Unfortunately I have a subpar Cisco knowledge, but it seems reading through this forum and working with the IOS has been the best way for me to learn. Thanks again.

 

[Supergrrover]

This is a great forum. I find a ton of things I didn't know.




Brent
Systems Engineer / Consultant
CCNP