Strange problem with PIX506

[rbnstudio]

I have a PIX506.

I cannot connect to a specific port(5905) from the outside to a specific computer on the inside.
However connections to other ports(like 80) to the same computer on the inside works fine, and connections to the port(5905) on other machines on the inside also works fine.

Here is some of the setup:
access-group outside_access_in in interface outside
access-list outside_access_in permit tcp any any eq www
access-list outside_access_in permit tcp any any eq 5905

The service on port 5905 on that computer works, because I'm able to connect to it from another machine on the inside.

Any ideas?

 

[yizhar]

HI.

Show us your STATIC commands, and the syslog messages (SHOW LOG) output.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[rbnstudio]

My static command looks like this:

nat (inside) 0 xxx.xxx.xxx.0 255.255.255.224 0 0
static (inside,outside) xxx.xxx.xxx.0 xxx.xxx.xxx.0 netmask 255.255.255.224 0 0

I'm using public ip's on the inside, therefor no nating.

 

[yizhar]

HI.

* The following could give some answers:

show connections

show xlate

logging buffer 4 (or other value)
show log
clear log
[... Try to connect ...]
show log

* You can also try without the static commands (leave only the nat 0 command), and see if this works or not.

* How many ip addresses and NICs are installed at the problematic server?
try to run:
show route
on the server (if it is a Windows computer).

* Try to allow ICMP and ping in both directions.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[rbnstudio]

Problem solved....

I turned out to be a problem that zonealarm was also running on that server. (not my own server, a customers)
After entering the port here in allow it works perfectly...

Thanks for the help anyway...