I need help for my pix 501

[youness.ouahboun]

Hi ,

I have a pix 501 , and i need to open 3 ports (80,21 and 25 ) to allow access people outside to my web , ftp and mail server.

my outside interface is configured with ISP Dhcp and my inside interface have a fixed ip address like ( 10.10.10.1 )....

How can i do.....

Thanks

[rsnider]

To allow inbound access you need to set up an access-list for incoming traffic on your outside interface and registered public IP addresses for each device you want reachable from the outside. The xxx.xxx.xxx.15 represent public addresses.

access-list acl_out permit tcp any host 10.10.10.2 eq 20

access-list acl_out permit tcp any host 10.10.10.2 eq 21

access-list acl_out permit tcp any host 10.10.10.2 eq 80

access-list acl_out permit tcp any host 10.10.10.3 eq 25

access-group acl_out in interface outside

static (inside,outside)xxx.xxx.xxx.15 10.10.10.2 netmask 255.255.255.255 0 0

static (inside,outside)xxx.xxx.xxx.16 10.10.10.3 netmask 255.255.255.255 0 0