Permit port 8080 only for specific site

htmltobing · ‎10-09-2003

Hallo

Ok I'll straight forward to the problem,

Lets say I just want permit port 8080 only for specific site and deny port 8080 for all sites that using it, can I do that on my PIX 506 (version 6.2)

Thanks

ccorp.tim · ‎10-09-2003

Hi,

Just to clarify,

You'd like to allow your internal users to access an external site via port 8080?

And by site are do you want to identify it by the IP address, or by the URL?

Cheers,

Tim.

htmltobing · ‎10-09-2003

Thanks Tim

http://abc.testing.com:8080/trak/testing.asp.

I already setting my pix with this command

access-list 190 permit tcp host xxx.xxx.xxx.xxx any eq 8080

With that command I belief all my internal users can access using port 8080.

What I want is, only that site (using port 8080) can be access by my internal users.

Thanks alot

Thomas

ccorp.tim · ‎10-09-2003

I think what you want to do is switch it round.

ie.

access-list 190 permit tcp [internal IP range] host xxx.xxx.xxx.xxx eq 8080

Then apply the list on the internal interface in an inbound direction.

Cheers,

Tim.