One of our site offices have a PIX 506E firewall and connectivity through the PIX is all well, except for port 9999.
The access-list applied on outside interface (inbound) is below.
access-list acl_out line 1 permit icmp any any (hitcnt=5)
access-list acl_out line 2 deny ip 192.168.0.0 255.255.0.0 any (hitcnt=0)
access-list acl_out line 3 permit ip any host 10.0.16.11 (hitcnt=163)
access-list acl_out line 4 permit tcp any host 10.0.16.230 eq 9999 (hitcnt=0)
access-list acl_out line 5 permit ip any host 10.0.16.156 (hitcnt=2)
We need to allow telnet to 10.0.16.230 on port 9999. WHen tried, the hit counter goes up but the PC returns the following message.
C:\>telnet 10.0.16.230 9999
Connecting To 10.0.16.230...Could not open connection to the host, on port 9999: Connect failed
However, if tried to telnet on 9999 internally it works fine.
Can anyone see anything that i am doing wrong. Is there any fixup protocols associated that I may need to disable to get this working.