I have an ADSL router with one public assigned IP, preforming NAT. This leads to a PIX 506e which in turn leads to a Web server. Everything inside the ADSL is on private IP addresses.
I want to allow external users access to the Web server on port 80.
I have ICMP connectivity internally and externally set up (for testing purposes only) and working correctly.
I have created a virtual server on the ADSL router which forwards port 80 traffic to the web server external interface. This worked sucessfully for half an hour and then something in the PIX config changed and it no longer works. Below is my PIX config
: Written by xxxxx at 08:41:10.001 NZST Thu Oct 13 2005
PIX Version 6.3(4)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxxxxxxx encrypted
passwd xxxxxxxxx encrypted
clock timezone GMT
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol icmp error
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
name 192.168.5.3 PixExt
name 192.168.6.1 PixInt
name 192.168.5.1 ADSLInt
name 192.168.6.2 WebExt
access-list acl1 permit icmp any any echo-reply
access-list acl1 permit icmp any any time-exceeded
access-list acl1 permit icmp any any unreachable
access-list acl1 permit tcp any host 192.168.6.2 eq www
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...