pix515 and X session

[iufmpica]

Hi,

I need to open a session X between an inside interfaceand the dmz. I put a acl by opening the port xdmcp inside towards dmz but how to make for dmz towards inside and ports 6000 and 6063?

thanks

[andyirving]

Inside will have access to DMZ if no ACL are in place, DMZ will have a path back to the inside interface as it has a TCP state open.

If you are using ACLs to control inside outbound traffic you will have to enable a return ACL on the DMZ interface.

[iufmpica]

I am using ACLs to control the traffic, I put this one

access-list inside-int permit udp host X.Y.Z.0 host A.B.C.D eq 177

but I can't define the return ACL

access-list dmz-int permit tcp host A.B.C.D host X.Y.Z.W eq ?????

[yang-jun]

the access-list only effect the income traffic to the pix