Still Cannot access Web Server from DMZ

[glory3321]

Hi !,


I am still having problem accessing Web server from DMZ

Hardware PIX 515 IOS 6.1

IIS Server = Windows 2000 IIS 5
IP Address - 192.168.2.2 from DMZ
IP address - 210.196.101.140 assign global IP
http port 80 - open


Although the static command and conduit command are correct
still users from Internet cannot access this server.

static (dmz,outside) 210.196.101.140 192.168.2.2 netmask 255.255.255.255 0 0

conduit permit tcp host 210.196.101.140 eq

http://www any

I still cannot access the Web server, are there any port that I need to open ?

Just for testing.. I move the IIS to outside network and assign it global IP and made some test.. the test was successfull users from internet can access it.

But when I put it on the DMZ the web server cann ot be access although the static mapping and conduit permission are enterd properly.


Please help

 

[yizhar]

HI.

Do you have also access-list in your configuration??

What about syslog messages?

logging on
logging buffer 4
clear log
... try to connect ...
show log
... what do you get ???

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[byteya]

using NAT?
need lines like the following:

global (dmz) 192.168.2.10
nat (dmz) 192.168.2.0 255.255.255.0 0 0

*J*