Modifying http fixup ports

[8c-stone]

I have a requirement to allow http on non-standard ports, 1024-65535, on PIX535s.

I expected it to work by adding the ports as per configuration guide to fixup http, however it hasn't.

Do I need to allow the ports through the ACL's explicitly too, ie. allow tcp for ports 1024-64535? Obviously I would like to avoid doing this if possible.

[joneschw1]

Did you do a clear xlate? Also, I believe that if you need traffic to pass on one of those ports, you will have to open it up in the acl.