Thanks again for your pacient,
I move the access-list to line 1 but is the same. Nothing hits.
In "real world" I´m doing a telnet from another customer with a ADSL line.
When I make telnet to port 50030 of the public IP, i don´t see anything in the ASDM Real Time Log Viewer. But if I make the same command but to port 80 (it should NOT work) i see the packet being denied in the ASDM Real Time Log Viewer.
The message thar appears is (telnet to ASA outside interface at port 80):
«
TCP access denied by ACL from 213.58.X.X/17927 to outside:194.38.X.X/80
»
The same command but to port 50030, nothing apears. It seems like the packets don´t reach the ASA. I make this test from several local and the result is the same.
Regarding the packet tracker command, I´m doing this:
«
packet-tracer input outside tcp 213.58.X.X 17927 194.38.X.X 50030
»
The result is this:
«
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 194.38.X.X 255.255.255.255 identity
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: NP Identity Ifc
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
»
