PIX SSH pass through

[delahaym]

I have a PIX 515E (2 interfaces) and I need to route SSH (port 22) traffic inbound to an internal host.

Even though I have entered the command to allow SSH in the access list the PIX still blocks the traffic. All other services work fine (port 80,25).

Am I missing something?

Thanks

[asfernandez]

Hi!

Have you used access-group for applying it?.

Have you used the static command?

[delahaym]

We are not using NAT.

This is part of the access list

access-list 100 permit tcp any host SSHSERVER eq 22

The other services (80, 25) work fine using simular commands.

Thanks

[delahaym]

Solved it!

I enabled GRE inbound on the external interface and it now works.

Is there any security problem with opening GRE?

Thanks for the help