PIX Fixup HTTP protocol 8080

[sghezzi]

Hello,

I have configured PIX to allow outbound HTTP to port 80, but I also would like to permit outgoing HTTP 8080 to Internet web servers running on port 8080.
I thought that adding the following line would be enough:
fixup protocol http 8080
but it doesn't work.
Outgoing http traffic to port 8080 only works if I add the following access-list:
access-list inside_access_in permit tcp any any eq 8080

Why????
Am I doing something wrong?

Thanks
Silvia

 

[tbissett]

The access-lsit statement is the one you need to permit 8080 traffic out, and kudos to you for implementing an outbound access-list! A lot more secure that way.

The fixup http is only needed if you have a WebSense or N2H2 URL filtering server. Otherwise, it really doesn't do much, if anything at all.